What’s Vulnerable › Vulnerabilities

CVE-2022-32175: AdGuardHome - CSRF

• Severity: medium (CVSS 5.4 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2022-10-11 · updated 2026-06-17
• Weakness: CWE-352

Description

In AdGuardHome, versions v0.95 through v0.108.0-b.13 are vulnerable to Cross-Site Request Forgery (CSRF), in the custom filtering rules functionality. An attacker can persuade an authorized user to follow a malicious link, resulting in deleting/modifying the custom filtering rules.

Affected products

• AdguardTeam AdGuardHome: from 0.95 before 0.108; 0.108, 0.108-beta1, 0.108-beta10, 0.108-beta11, 0.108-beta12, 0.108-beta2 (+7) — fixed in 0.108

How to fix

Upgrade to a fixed version: AdguardTeam AdGuardHome 0.108. Check the vendor advisory for mitigations.

References

• https://github.com/AdguardTeam/AdGuardHome/blob/v0.108.0-b.13/internal/home/controlfiltering.go#L265
• https://www.mend.io/vulnerability-database/CVE-2022-32175
• https://github.com/AdguardTeam/AdGuardHome/blob/v0.108.0-b.13/internal/home/controlfiltering.go#L265
• https://www.mend.io/vulnerability-database/CVE-2022-32175

Get alerted when CVE-2022-32175 or the next vulnerability affects your stack