CVE-2026-41448: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in AdguardTeam AdGuardHome
AdGuard Home, when started with the --glinet flag, contains an authentication bypass vulnerability that allows unauthenticated attackers to gain full admin access by supplying a path traversal sequence in the Admin-Token cookie, exploiting unsanitized string concatenation in the token file path construction within the authglinet middleware. Attackers can craft a request with a traversal payload in the Admin-Token header to redirect file reads to arbitrary paths.
AI Analysis
Technical Summary
CVE-2026-41448 is a critical vulnerability in AdGuard Home that occurs when the software is started with the --glinet flag. An attacker can supply a path traversal sequence in the Admin-Token cookie, which is not properly sanitized during token file path construction in the authglinet middleware. This allows unauthenticated attackers to bypass authentication and gain full admin access by redirecting file reads to arbitrary filesystem locations. The vulnerability has a CVSS 4.0 score of 9.2, indicating high exploitability and impact. No patch or official remediation guidance is currently available.
Potential Impact
Successful exploitation results in unauthenticated attackers gaining full administrative access to AdGuard Home instances running with the --glinet flag. This compromises the confidentiality and integrity of the system by allowing arbitrary file reads and potentially full control over the application.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, avoid running AdGuard Home with the --glinet flag or restrict access to trusted networks to reduce exposure.
CVE-2026-41448: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in AdguardTeam AdGuardHome
Description
AdGuard Home, when started with the --glinet flag, contains an authentication bypass vulnerability that allows unauthenticated attackers to gain full admin access by supplying a path traversal sequence in the Admin-Token cookie, exploiting unsanitized string concatenation in the token file path construction within the authglinet middleware. Attackers can craft a request with a traversal payload in the Admin-Token header to redirect file reads to arbitrary paths.
CVSS v4.0
Score 9.2critical
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-41448 is a critical vulnerability in AdGuard Home that occurs when the software is started with the --glinet flag. An attacker can supply a path traversal sequence in the Admin-Token cookie, which is not properly sanitized during token file path construction in the authglinet middleware. This allows unauthenticated attackers to bypass authentication and gain full admin access by redirecting file reads to arbitrary filesystem locations. The vulnerability has a CVSS 4.0 score of 9.2, indicating high exploitability and impact. No patch or official remediation guidance is currently available.
Potential Impact
Successful exploitation results in unauthenticated attackers gaining full administrative access to AdGuard Home instances running with the --glinet flag. This compromises the confidentiality and integrity of the system by allowing arbitrary file reads and potentially full control over the application.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, avoid running AdGuard Home with the --glinet flag or restrict access to trusted networks to reduce exposure.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulnCheck
- Date Reserved
- 2026-04-20T16:07:47.309Z
- Cvss Version
- 4.0
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 6a26f68ee29bf47b50440d44
Added to database: 06/08/2026, 17:06:22 UTC
Last enriched: 07/15/2026, 10:29:48 UTC
Last updated: 07/31/2026, 19:22:58 UTC
Views: 53
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.