AdGuardHome vulnerabilities

2 known vulnerabilities in AdGuardHome from AdguardTeam. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.4 Critical severity

  AdGuardHome: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2026-41448Jun 8, 2026AdguardTeam

  AdGuard Home, when started with the --glinet flag, contains an authentication bypass vulnerability that allows unauthenticated attackers to gain full admin access by supplying a path traversal sequence in the Admin-Token cookie, exploiting unsanitized string c

• 9.8 Critical severity

  AdGuardHome: Improper Authentication

  CVE-2026-32136Mar 11, 2026AdguardTeam

  AdGuard Home is a network-wide software for blocking ads and tracking. Prior to 0.107.73, an unauthenticated remote attacker can bypass all authentication in AdGuardHome by sending an HTTP/1.1 request that requests an upgrade to HTTP/2 cleartext (h2c). Once th