Loading vulnerability…
Privilege Escalation in UniFi OS with UniFi Protect Application
CVE-2026-55112 is an improper access control vulnerability in Ubiquiti UniFi OS when configured with the UniFi Protect Application. Under certain conditions, a remote attacker with network access and only low privileges can exploit insufficient authorization controls to escalate privileges on the host device. The issue affects UniFi OS deployments on affected hardware consoles and self-hosted instances running vulnerable versions, and is rated High with a CVSS score of 7.5.
What it means and what to do now: patch path, interim mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
Successful exploitation allows privilege escalation on the host device. An attacker who already has low-privileged access can obtain elevated permissions beyond those intended, enabling unauthorized administrative or system-level actions and potentially facilitating broader compromise of the affected UniFi OS instance.
If you can’t patch tonight, do this now.
No interim workaround information is currently available. Limit network exposure of UniFi management interfaces and UniFi Protect-related services to trusted administrative networks, restrict low-privileged account access, and monitor for unauthorized privilege changes until patched versions are deployed.
Patch, then assume compromise.
Upgrade UniFi OS to version 5.1.19 or later on affected platforms. Vendor guidance indicates patched releases are available and that updating to the fixed UniFi OS version is the primary remediation.
No public exploits tracked yet. Mallory keeps watching.
Products and vendors Mallory has correlated with this vulnerability. Open in Mallory to drill down to specific CPE configurations and version ranges.
11 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.