This vulnerability (CVE-2026-34911) involves a CWE-22 path traversal issue in UniFi OS Server by Ubiquiti Inc. An attacker with network access and low privileges can exploit the flaw to traverse directories and access files outside the intended scope, potentially exposing sensitive data. The CVSS 3.1 base score is 7.7, reflecting network attack vector, low attack complexity, low privileges required, no user interaction, scope change, and high confidentiality impact without integrity or availability impact. No patch or official remediation level has been disclosed as of the publication date.

Successful exploitation allows an attacker with low privileges on the network to read sensitive files on the underlying system, potentially leading to information disclosure. There is no indication of integrity or availability impact. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict network access to UniFi OS Server devices to trusted users only and monitor for suspicious activity related to file access attempts.