CVE-2026-55117 is a CWE-22 path traversal vulnerability in the UniFi Access Application by Ubiquiti Inc. An attacker with network access can exploit this vulnerability to read files on the host device that should be inaccessible, potentially exposing sensitive information. The vulnerability has a CVSS 3.1 base score of 8.6, indicating high severity, with attack vector network, low attack complexity, no privileges required, no user interaction, and a scope change affecting confidentiality only. No known exploits in the wild or vendor patches have been reported as of the published date.

Successful exploitation allows an unauthenticated attacker on the network to access arbitrary files on the host device running the UniFi Access Application, leading to a confidentiality breach. There is no impact on integrity or availability according to the CVSS vector. This could expose sensitive configuration or credential files to attackers.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict network access to the UniFi Access Application to trusted users only and monitor for suspicious activity related to file access attempts.