CVE-2026-41448
Critical · CVSS 9.4AdGuard Home — Authentication Bypass via Path Traversal (CWE-22)
- CVSS
- 9.4
- nvd
- EPSS
- —
- KEV
- No
- Class
- oss containerizable
- CWE-22
Description
AdGuard Home, when started with the --glinet flag, contains an authentication bypass vulnerability that allows unauthenticated attackers to gain full admin access by supplying a path traversal sequence in the Admin-Token cookie, exploiting unsanitized string concatenation in the token file path construction within the authglinet middleware. Attackers can craft a request with a traversal payload in the Admin-Token header to redirect file reads to arbitrary paths.
Search profile — drives PoC discovery
Symbols authglinetAdmin-Token--glinetglinettoken file path constructionstring concatenationauthglinet middlewareAdmin-Token cookieAdmin-Token header
Keywords CVE-2026-41448AdGuard HomeAdGuardHomeglinetauthentication bypasspath traversalAdmin-Tokenauthglinetadmin token cookiepath traversal authentication bypassunauthenticated admin access
Versions: <0.107.77
References
Status: enriched · ingested 2026-07-15T00:00:20.000Z · profiled 2026-07-15T00:30:20.000Z