Skip to content

Instantly share code, notes, and snippets.

@satmandu
Forked from CappyT/GUIDE.md
Last active April 4, 2026 19:21
Show Gist options
  • Select an option

  • Save satmandu/1cfd5a325620095f7387ff7473f848dc to your computer and use it in GitHub Desktop.

Select an option

Save satmandu/1cfd5a325620095f7387ff7473f848dc to your computer and use it in GitHub Desktop.
Hassio Unifi Network Application hotfix

HA OS UniFi Add-on - Temporary Hotfix (CVE-2026-22557 & CVE-2026-22558)

This is a quick image-cache hijacking workaround to patch the local container without migrating volumes or waiting for the upstream release. It restores the s6-overlay entrypoint correctly so the add-on boots normally.

The Supervisor will automatically wipe this custom image and pull the official one once the maintainers release the patched update.

Prerequisites:

1. SSH access to the HA OS host on port 22222. (refer to the docs https://developers.home-assistant.io/docs/operating-system/debugging/#enabling-ssh-access-to-the-host )

2. Stop the UniFi add-on from the Home Assistant UI.

Step 1: Spawn a dummy container

(Note: Check your architecture and tag with docker images | grep unifi. This example uses aarch64 and tag 5.0.0)

# Run an interactive container bypassing the s6-overlay init system
docker run -it --name unifi_hotfix --entrypoint /bin/bash ghcr.io/hassio-addons/unifi/aarch64:5.0.0

Step 2: Inject JRE 25 and apply the patch (Inside the container)

# Install base dependencies
apt-get update && apt-get install -y wget apt-transport-https gnupg

# Add Adoptium GPG key and repo for Ubuntu 20.04 (Focal)
gpg --keyserver hkp://keyserver.ubuntu.com:80 --recv-keys 843C48A565F8F04B
gpg --export 843C48A565F8F04B > /etc/apt/trusted.gpg.d/adoptium.gpg
echo "deb https://packages.adoptium.net/artifactory/deb focal main" > /etc/apt/sources.list.d/adoptium.list

# Install JRE 25
apt-get update && apt-get install -y temurin-25-jre

# Download the new version of Unifi Network Application:
curl https://dl.ui.com/unifi/10.2.105-2yiwv9j6z9/unifi-native_sysvinit.deb -o /tmp/unifi.deb

# Install the new version
dpkg -i /tmp/unifi.deb

# Exit the container shell
exit

Step 3: Commit and restore the entrypoint

# Overwrite the cached image and re-inject the s6-overlay entrypoint (/init)
docker commit -c 'ENTRYPOINT ["/init"]' -c 'CMD []' unifi_hotfix ghcr.io/hassio-addons/unifi/aarch64:5.0.0

Step 4: Cleanup and boot

# Remove the dummy container
docker rm unifi_hotfix

Finally, go back to the Home Assistant UI and Start the add-on.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment