CVE-2026-41448

The flaw

AdGuard Home, when started with the --glinet flag, contains an authentication bypass vulnerability that allows unauthenticated attackers to gain full admin access by supplying a path traversal sequence in the Admin-Token cookie, exploiting

What to do

Review advisory and patch per vendor guidance.

References