Critical RCE Vulnerability in UniFi OS Allows Unauthorized Root Access

A critical vulnerability chain in UniFi OS Server has been disclosed, allowing unauthenticated remote code execution (RCE) and full root access. The vulnerabilities include an authentication-gateway bypass, a path-traversal mismatch, and a command-injection sink in the package-update service. Attackers can exploit these flaws by sending a single crafted HTTP request, compromising affected devices without needing any credentials. This issue affects thousands of organizations using UniFi OS Server, which is the management platform for the UniFi family of products. Security Advisory Bulletin 064 has been issued, highlighting the severity of the vulnerabilities. Organizations are urged to assess their systems and apply necessary mitigations. No specific CVEs have been mentioned yet, but the implications are significant for cybersecurity across affected sectors.

Key Points: • UniFi OS Server vulnerabilities allow unauthenticated remote code execution. • Attackers can gain full root access with a single crafted HTTP request. • Thousands of organizations using UniFi OS Server are at risk.