GitHub Advisoryadvisory · Go
GHSA-7jp9-vgmq-c8r5 AdGuardHome privilege escalation vulnerability
HIGH
Official page ↗
- Aliases
- CVE-2024-36586
- Ecosystem
- Go
- Packages
- github.com/AdguardTeam/AdGuardHome
- Severity
- High
- CVSS vector
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
- Weaknesses
- CWE-269
- Reviewed
- 2024-06-13
Affected packages
• Go github.com/AdguardTeam/AdGuardHome: >= 0.93, <= 0.107.51 (no fix yet)
Description
An issue in AdGuardHome v0.93 to latest allows unprivileged attackers to escalate privileges via overwriting the AdGuardHome binary.
Related
Alias · CVE (1)
- CVE-2024-36586 An issue in AdGuardHome v0.93 to latest allows unprivileged attackers to escalate privileges via overwriting the AdGuardHome binary. vulnerability
Weakness · CWE (1)
- CWE-269 Improper Privilege Management weakness