Ubiquiti has published Security Advisory Bulletin 070 for the UniFi Protect AI Key, the add-on box that runs object, person and licence plate detection and footage search locally for UniFi Protect cameras. The bulletin covers six vulnerabilities. According to the records published in the US National Vulnerability Database (NVD) on 14 October 2026, all of them affect AI Key firmware older than 2.2.8, and 2.2.8 fixes them.
The six CVEs
Every one of the six has the CVSS vector PR:N and UI:N: an attacker needs no account and no action from the user, only network access to the device.
| CVE | CVSS 3.1 | What an attacker can do |
|---|---|---|
| CVE-2026-110459 | 8.6 | Improper access control: read information, make unauthorised changes and cause a denial of service |
| CVE-2026-110455 | 8.1 | Improper input validation leading to command injection on the device ("under certain conditions") |
| CVE-2026-110454 | 5.3 | Improper access control: reach internal resources through the device |
| CVE-2026-110456 | 5.3 | The same, under certain conditions |
| CVE-2026-110457 | 3.7 | Path traversal: learn about files on the device |
| CVE-2026-110458 | 3.7 | Path traversal: create or truncate files on the device |
The command injection has the higher attack complexity (AC:H), so its score is lower than that of the access control flaw. Ubiquiti does not explain what "certain conditions" means, and al-ice.ai, which analysed the bulletin on 15 October, found no public technical write-up. None of the six was in CISA's catalogue of known exploited vulnerabilities (KEV) in its 16 October edition.
Why the low scores still matter
The two path traversal bugs are the least serious on paper. Al-ice.ai points out that Ubiquiti added a note to five of the six bulletin entries saying they can be chained with other vulnerabilities. A bug that reveals what files exist and a bug that writes files are the kind of steps that make a harder command injection easier, so the six scores do not add up to the real risk.
The AI Key is not meant to be reachable from the internet, so "network access" here means the local network or VLAN the cameras are on. In many homes and small offices that is the same flat network as everything else.
What to do
- Check the AI Key firmware version in UniFi Protect and update to 2.2.8 or later. According to al-ice.ai, the 2.2.8 release notes say it requires UniFi Protect 7.2 or newer, so the Protect application may need updating first.
- If the device updates itself automatically, it may already be patched: al-ice.ai reports that 2.2.8 reached the stable channel about a month before the bulletin, described then only as a stability update.
- Keep camera infrastructure on its own VLAN and allow only the Protect application to talk to the AI Key. That does not remove the flaws, but it limits who can reach them.