AdGuard Home v0.107.73 released on 10-03-2026
AdGuard Home v0.107.73 is out now. It patches a critical authentication bypass that could allow unauthenticated users to gain full access to AdGuard Home.
See the project’s GitHub milestone for the full changelog and deployment notes.
What’s in this release
- Hotfix for a critical vulnerability that allowed authentication to be bypassed, potentially granting full access without valid credentials.
- Authentication is now applied to requests upgraded from HTTP/2 Cleartext (H2C) when accessing public resources, closing the bypass vector.
- Community acknowledgements: @mandreko reported the issue and contributors helped with issues, translations and testing.
Upgrade notes
- Update to v0.107.73 as a priority; after updating, verify that access controls behave as expected and review logs for any suspicious activity.
- Refer to the v0.107.73 GitHub milestone for the full changelog and any additional deployment or rollback guidance.
Please share comments or your experience with the update on the project’s GitHub or community channels.
