CVE-2025-23119 Command injection in UniFi Protect Cameras
Attackers on the adjacent network can bypass authentication and execute remote code on UniFi Protect Cameras via improper neutralization of escape sequences.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-23119?
CVE-2025-23119 is a high-severity command injection vulnerability in Ubiquiti Inc UniFi Protect Cameras, published on 1 Mar 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
An Improper Neutralization of Escape Sequences vulnerability could allow an Authentication Bypass with a Remote Code Execution (RCE) by a malicious actor with access to UniFi Protect Cameras adjacent network.
Weakness: CWE-77
Which versions are affected by CVE-2025-23119?
How do I fix CVE-2025-23119?
No fix has been published for CVE-2025-23119 yet. Limit exposure of the affected software until one is available.
Upgrade, and pass arguments to programs as a list instead of through a shell. More about Command injection.
Is CVE-2025-23119 being exploited?
There is no known exploitation of CVE-2025-23119 in the wild and no public exploit code.
Sources
Also known as GHSA-r55c-q3r9-vpfj.