AdGuard Home Authentication Bypass Vulnerability in GLiNET Mode Allowing Admin Access

An authentication bypass vulnerability has been identified in AdGuard Home versions prior to 0.107.77, when the application is started with the --glinet flag. This vulnerability allows unauthenticated attackers to gain full administrative access by injecting a path traversal sequence into the Admin-Token cookie. The issue arises from unsanitized string concatenation in the token file path construction within the authglinet middleware, enabling attackers to redirect file reads to arbitrary paths.

Impact

Exploitation of this vulnerability allows for unauthorized administrative access to the AdGuard Home application.

Remediation

Users can upgrade to AdGuard Home version 0.107.77 or later to address this vulnerability.