CVE-2025-23164: Ubiquiti Inc UniFi Protect Application

Medium severity, CVSS 4.4. EPSS: 0.4% chance of exploitation in the next 30 days.

A misconfigured access token mechanism in the Unifi Protect Application (Version 5.3.41 and earlier) could permit the recipient of a "Share Livestream" link to maintain access to the corresponding livestream subsequent to such link becoming disabled.

Affected products

• Ubiquiti Inc UniFi Protect Application: before 5.3.45 (fixed in 5.3.45)

Published 2025-05-19. Last modified 2026-06-17.