Loading vulnerability…
Path Traversal in Ubiquiti UniFi OS
CVE-2026-34911 is a high-severity path traversal vulnerability in Ubiquiti UniFi OS affecting a broad range of UniFi consoles, gateways, servers, and storage appliances. The flaw allows an authenticated attacker with low privileges and network access to craft requests that escape intended directory boundaries in the UniFi OS management interface and read files from the underlying Linux-based operating system. Public reporting indicates the issue is a file-read traversal rather than direct code execution, and that traversal sequences in request paths or parameters can be used to access sensitive files outside the restricted web application scope. Public materials do not disclose the exact vulnerable endpoint or the precise role required beyond low-privileged authenticated access.
What it means and what to do now: patch path, interim mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
Successful exploitation allows disclosure of sensitive files from the underlying operating system, including configuration data, credential material, and other system information. Exposure of such files can enable follow-on activity such as privilege escalation, lateral movement, persistence, session forgery using stolen secrets, or data exfiltration, depending on what information is accessible on the affected device.
If you can’t patch tonight, do this now.
If immediate patching is not possible, restrict access to the UniFi OS management interface to trusted administrative networks only, remove any public internet exposure, and require controlled remote administrative access such as through a VPN. Review access and boot logs for signs of traversal attempts and investigate possible prior compromise, especially where sensitive files may have been exposed. Monitor for vendor-provided indicator-of-compromise checks introduced with patched firmware.
Patch, then assume compromise.
Apply Ubiquiti fixes from Security Advisory Bulletin 064. Reported fixed versions include UniFi OS Server 5.0.8 or later, most UniFi OS device families on 5.1.12 or later, UNAS device families on 5.1.10 or later, and UDM Beast on 5.1.11 or later. Ensure all affected UniFi OS deployments are upgraded to the vendor-designated fixed release for the specific product family.
No public exploits tracked yet. Mallory keeps watching.
Products and vendors Mallory has correlated with this vulnerability. Open in Mallory to drill down to specific CPE configurations and version ranges.
18 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.