False
        

tag:github.com,2008:https://github.com/AdguardTeam/AdGuardHome/releases

Release notes from AdGuardHome

2026-05-22T07:55:00Z tag:github.com,2008:Repository/62712899/v0.108.0-b.87 2026-05-22T08:07:22Z
2026-06-02T16:52:51Z tag:github.com,2008:Repository/62712899/v0.108.0-b.88 2026-06-02T17:19:55Z

AdGuard Home v0.108.0-b.88

<p>Changes compared to the previous beta, v0.108.0-b.87. See <a href="https://github.com/AdguardTeam/AdGuardHome/tree/v0.108.0-b.88/CHANGELOG.md">CHANGELOG.md</a> for all changes.</p> <h2>Acknowledgements</h2> <p>A special thanks to <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/djnnvx/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/djnnvx">@djnnvx</a> for reporting the vulnerability, our community moderators team, as well as to everyone who filed and inspected issues, added translations, and helped us test this release!</p> <h2>Full changelog</h2> <h3>Security</h3> <ul> <li> <p>Authorization in GLiNET mode is no longer vulnerable to path traversal attacks.</p> <p><strong>NOTE:</strong> This is CVE-2026-41448. We thank <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/djnnvx/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/djnnvx">@djnnvx</a> for reporting this security issue.</p> </li> </ul> <h3>Fixed</h3> <ul> <li>Blocked services check on the Custom filtering rules page does not work properly without specifying of a client.</li> </ul> adguard-bot tag:github.com,2008:Repository/62712899/v0.107.77 2026-06-02T12:52:16Z

AdGuard Home v0.107.77

<p>The quality of a product is not defined solely by code or developers’ technical prowess. A strong community—or the lack of one—can often make or break how successful a piece of software will be. We are very lucky to have such a devoted and passionate community around AdGuard Home. This update has once again demonstrated this, as we were able to quickly address a vulnerability reported by one of our community members.</p> <h2>Acknowledgments</h2> <p>A special thanks to <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/djnnvx/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/djnnvx">@djnnvx</a> for reporting the vulnerability, our community moderators team and to everyone who filed and inspected issues, added translations, and helped us test this release!</p> <h2>Full changelog</h2> <p>See also the <a href="https://github.com/AdguardTeam/AdGuardHome/milestone/112?closed=1">v0.107.77 GitHub milestone</a>.</p> <h3>Security</h3> <ul> <li> <p>Authorization in GLiNET mode is no longer vulnerable to path traversal attacks.</p> <p><strong>NOTE:</strong> This is CVE-2026-41448. We thank <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/djnnvx/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/djnnvx">@djnnvx</a> for reporting this security issue.</p> </li> </ul> <h3>Added</h3> <ul> <li>New <code>reason</code> query parameter in <code>GET /control/querylog</code>. See <code>openapi/openapi.yaml</code> for the full description.</li> </ul> <h3>Deprecated</h3> <ul> <li>Query parameter <code>response_status</code> in <code>GET /control/querylog</code> is now deprecated. Use new <code>reason</code> query parameter instead.</li> </ul> adguard-bot tag:github.com,2008:Repository/62712899/v0.108.0-b.87 2026-05-22T08:07:22Z

AdGuard Home v0.108.0-b.87

<p>Changes compared to the previous beta, v0.108.0-b.86. See <a href="https://github.com/AdguardTeam/AdGuardHome/tree/v0.108.0-b.87/CHANGELOG.md">CHANGELOG.md</a> for all changes.</p> <h2>Full changelog</h2> <h3>Changed</h3> <ul> <li> <p>Duration values in YAML configuration file now support <code>d</code> (days) units and has been updated.</p> <p><strong>NOTE:</strong> Any rollback to version below the <code>v0.107.76</code> should convert the values back to hours.</p> </li> </ul> <h3>Fixed</h3> <ul> <li>DNS caching with disabled DNSSEC (<a href="https://github.com/AdguardTeam/AdGuardHome/issues/8384" data-hovercard-type="issue" data-hovercard-url="/AdguardTeam/AdGuardHome/issues/8384/hovercard">#8384</a>).</li> </ul> adguard-bot tag:github.com,2008:Repository/62712899/v0.107.76 2026-05-21T18:26:30Z

AdGuard Home v0.107.76

<p>They say: don’t fix it if it’s not broken. But what if it is, in fact, broken? Like the cache we may have accidentally messed up during the last update? For such cases, there are hotfixes! Make sure to install the today’s update in order to fix the cache on your AdGuard Home.</p> <h2>Acknowledgments</h2> <p>A special thanks to our community moderators team and to everyone who filed and inspected issues, added translations, and helped us test this release!</p> <h2>Full changelog</h2> <p>See also the <a href="https://github.com/AdguardTeam/AdGuardHome/milestone/111?closed=1">v0.107.76 GitHub milestone</a>.</p> <h3>Changed</h3> <ul> <li> <p>Duration values in YAML configuration file now support <code>d</code> (days) units and has been updated.</p> <p><strong>NOTE:</strong> Any rollback to version below the <code>v0.107.76</code> should convert the values back to hours.</p> </li> </ul> <h3>Fixed</h3> <ul> <li>DNS caching with disabled DNSSEC (<a href="https://github.com/AdguardTeam/AdGuardHome/issues/8384" data-hovercard-type="issue" data-hovercard-url="/AdguardTeam/AdGuardHome/issues/8384/hovercard">#8384</a>).</li> </ul> adguard-bot tag:github.com,2008:Repository/62712899/v0.108.0-b.86 2026-05-19T15:05:58Z

AdGuard Home v0.108.0-b.86

<p>Changes compared to the previous beta, v0.108.0-b.85. See <a href="https://github.com/AdguardTeam/AdGuardHome/tree/v0.108.0-b.86/CHANGELOG.md">CHANGELOG.md</a> for all changes.</p> <h2>Acknowledgements</h2> <p>A special thanks to <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/N0zoM1z0/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/N0zoM1z0">@N0zoM1z0</a> for reporting the vulnerability, our community moderators team, as well as to everyone who filed and inspected issues, added translations, and helped us test this release!</p> <h2>Full changelog</h2> <h3>Security</h3> <ul> <li> <p>Go version has been updated to prevent the possibility of exploiting the Go vulnerabilities fixed in <a href="https://groups.google.com/g/golang-announce/c/qcCIEXso47M" rel="nofollow">1.26.3</a>.</p> </li> <li> <p>IDs of requests received over DoH and DoQ and forwarded to plain-DNS upstreams are now set to non-zero values to improve security.</p> <p>This is <a title="GHSA-xgx4-4h9w-53pv" href="https://github.com/AdguardTeam/AdGuardHome/security/advisories/GHSA-xgx4-4h9w-53pv">GHSA-xgx4-4h9w-53pv</a>. We thank <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/N0zoM1z0/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/N0zoM1z0">@N0zoM1z0</a> for reporting this security issue.</p> </li> </ul> <h3>Added</h3> <ul> <li>New <code>reason</code> query parameter in <code>GET /control/querylog</code>. See <code>openapi/openapi.yaml</code> for the full description.</li> </ul> <h3>Changed</h3> <ul> <li> <p>Frontend API requests no longer depend on axios.</p> </li> <li> <p>Dashboard charts use Recharts instead of Nivo.</p> </li> <li> <p><code>enable_dnssec</code> in <code>dns</code> configuration now defines whether the proxy should set the DO flag in the upstream requests, the default is <code>true</code> (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2329085986" data-permission-text="Title is private" data-url="https://github.com/AdguardTeam/AdGuardHome/issues/7046" data-hovercard-type="issue" data-hovercard-url="/AdguardTeam/AdGuardHome/issues/7046/hovercard" href="https://github.com/AdguardTeam/AdGuardHome/issues/7046">#7046</a>).</p> </li> </ul> <h3>Deprecated</h3> <ul> <li>Query parameter <code>response_status</code> in <code>GET /control/querylog</code> is now deprecated. Use new <code>reason</code> query parameter instead.</li> </ul> <h3>Fixed</h3> <ul> <li> <p>Statistics database deadlock (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4339154857" data-permission-text="Title is private" data-url="https://github.com/AdguardTeam/AdGuardHome/issues/8359" data-hovercard-type="issue" data-hovercard-url="/AdguardTeam/AdGuardHome/issues/8359/hovercard" href="https://github.com/AdguardTeam/AdGuardHome/issues/8359">#8359</a>).</p> </li> <li> <p>Translated labels on the DNS settings pages not updating after changing the UI language.</p> </li> <li> <p>Dashboard charts now correctly display lower query counts (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2188526067" data-permission-text="Title is private" data-url="https://github.com/AdguardTeam/AdGuardHome/issues/6823" data-hovercard-type="issue" data-hovercard-url="/AdguardTeam/AdGuardHome/issues/6823/hovercard" href="https://github.com/AdguardTeam/AdGuardHome/issues/6823">#6823</a>).</p> </li> <li> <p>Redundant validation warnings about DHCP when it's disabled (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4288452441" data-permission-text="Title is private" data-url="https://github.com/AdguardTeam/AdGuardHome/issues/8348" data-hovercard-type="issue" data-hovercard-url="/AdguardTeam/AdGuardHome/issues/8348/hovercard" href="https://github.com/AdguardTeam/AdGuardHome/issues/8348">#8348</a>).</p> </li> <li> <p>Safe Browsing and Parental Control labels on the General Settings page not updating after changing the UI language.</p> </li> </ul> adguard-bot tag:github.com,2008:Repository/62712899/v0.107.75 2026-05-19T11:38:51Z

AdGuard Home v0.107.75

<p>This update gives AdGuard Home a solid security upgrade — think of it as tightening the locks and double-checking the doors.</p> <p>We’ve fixed a critical vulnerability affecting DNS-over-QUIC and DNS-over-HTTPS that could put your DNS privacy at risk. The gap is now closed, and your encrypted traffic is back to traveling through a properly armored tunnel.</p> <p>We also updated Go to the latest version, sweeping out known vulnerabilities in its libraries.</p> <h2>Acknowledgments</h2> <p>A special thanks to <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/N0zoM1z0/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/N0zoM1z0">@N0zoM1z0</a> for reporting the vulnerability, our community moderators team and to everyone who filed and inspected issues, added translations, and helped us test this release!</p> <h2>Full changelog</h2> <p>See also the <a href="https://github.com/AdguardTeam/AdGuardHome/milestone/110?closed=1">v0.107.75 GitHub milestone</a>.</p> <h3>Security</h3> <ul> <li> <p>Go version has been updated to prevent the possibility of exploiting the Go vulnerabilities fixed in <a href="https://groups.google.com/g/golang-announce/c/qcCIEXso47M" rel="nofollow">1.26.3</a>.</p> </li> <li> <p>IDs of requests received over DoH and DoQ and forwarded to plain-DNS upstreams are now set to non-zero values to improve security.</p> <p>This is <a title="GHSA-xgx4-4h9w-53pv" href="https://github.com/AdguardTeam/AdGuardHome/security/advisories/GHSA-xgx4-4h9w-53pv">GHSA-xgx4-4h9w-53pv</a>. We thank <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/N0zoM1z0/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/N0zoM1z0">@N0zoM1z0</a> for reporting this security issue.</p> </li> </ul> <h3>Changed</h3> <ul> <li> <p>Frontend API requests no longer depend on axios.</p> </li> <li> <p>Dashboard charts use Recharts instead of Nivo.</p> </li> <li> <p><code>enable_dnssec</code> in <code>dns</code> configuration now defines whether the proxy should set the DO flag in the upstream requests, the default is <code>true</code> (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2329085986" data-permission-text="Title is private" data-url="https://github.com/AdguardTeam/AdGuardHome/issues/7046" data-hovercard-type="issue" data-hovercard-url="/AdguardTeam/AdGuardHome/issues/7046/hovercard" href="https://github.com/AdguardTeam/AdGuardHome/issues/7046">#7046</a>).</p> </li> </ul> <h3>Fixed</h3> <ul> <li> <p>Statistics database deadlock (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4339154857" data-permission-text="Title is private" data-url="https://github.com/AdguardTeam/AdGuardHome/issues/8359" data-hovercard-type="issue" data-hovercard-url="/AdguardTeam/AdGuardHome/issues/8359/hovercard" href="https://github.com/AdguardTeam/AdGuardHome/issues/8359">#8359</a>).</p> </li> <li> <p>Translated labels on the DNS settings pages not updating after changing the UI language.</p> </li> <li> <p>Dashboard charts now correctly display lower query counts (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2188526067" data-permission-text="Title is private" data-url="https://github.com/AdguardTeam/AdGuardHome/issues/6823" data-hovercard-type="issue" data-hovercard-url="/AdguardTeam/AdGuardHome/issues/6823/hovercard" href="https://github.com/AdguardTeam/AdGuardHome/issues/6823">#6823</a>).</p> </li> <li> <p>Redundant validation warnings about DHCP when it's disabled (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4288452441" data-permission-text="Title is private" data-url="https://github.com/AdguardTeam/AdGuardHome/issues/8348" data-hovercard-type="issue" data-hovercard-url="/AdguardTeam/AdGuardHome/issues/8348/hovercard" href="https://github.com/AdguardTeam/AdGuardHome/issues/8348">#8348</a>).</p> </li> <li> <p>Safe Browsing and Parental Control labels on the General Settings page not updating after changing the UI language.</p> </li> </ul> adguard-bot tag:github.com,2008:Repository/62712899/v0.107.74 2026-04-16T11:34:27Z

AdGuard Home v0.107.74

<p>As with everything in life, the best things are only the best because they stand out from the mundane. Without regular there would be no exceptional.</p> <p>…all these words to say that this AdGuard Home update is the ‘boring’ one, with mostly bug fixes and security updates — so that the next time we add something new, it would feel fresh and exciting!</p> <h2>Acknowledgments</h2> <p>A special thanks to our community moderators team and to everyone who filed and inspected issues, added translations, and helped us test this release!</p> <h2>Full changelog</h2> <p>See also the <a href="https://github.com/AdguardTeam/AdGuardHome/milestone/109?closed=1">v0.107.74 GitHub milestone</a>.</p> <h3>Security</h3> <ul> <li> <p>Frontend libraries has been updated to prevent the possibility of exploiting the vulnerability described in <a href="https://nvd.nist.gov/vuln/detail/CVE-2026-40175" rel="nofollow">CVE-2026-40175</a>.</p> </li> <li> <p>Go version has been updated to prevent the possibility of exploiting the Go vulnerabilities fixed in <a href="https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU" rel="nofollow">1.26.2</a>.</p> </li> </ul> <h3>Changed</h3> <h4>Configuration changes</h4> <p>In this release, the schema version has changed from 33 to 34.</p> <ul> <li> <p>Added a new field <code>doh</code> in <code>http</code> configuration.</p> <div class="highlight highlight-source-yaml notranslate position-relative overflow-auto" data-snippet-clipboard-copy-content="# BEFORE: 'http': # … 'tls': # … 'allow_unencrypted_doh': false # AFTER: 'http': # … 'doh': 'insecure_enabled': false 'routes': - 'GET /dns-query' - 'POST /dns-query' - 'GET /dns-query/{ClientID}' - 'POST /dns-query/{ClientID}' 'tls': # …"><pre><span class="pl-c"><span class="pl-c"># BEFORE: <span class="pl-s"><span class="pl-pds">'<span class="pl-ent">http<span class="pl-pds">': <span class="pl-c"><span class="pl-c"># … <span class="pl-s"><span class="pl-pds">'<span class="pl-ent">tls<span class="pl-pds">'</span></span>: <span class="pl-c"><span class="pl-c">#</span> …</span> <span class="pl-s"><span class="pl-pds">'</span><span class="pl-ent">allow_unencrypted_doh</span><span class="pl-pds">'</span></span>: <span class="pl-c1">false</span> <span class="pl-c"><span class="pl-c">#</span> AFTER:</span> <span class="pl-s"><span class="pl-pds">'</span><span class="pl-ent">http</span><span class="pl-pds">'</span></span>: <span class="pl-c"><span class="pl-c">#</span> …</span> <span class="pl-s"><span class="pl-pds">'</span><span class="pl-ent">doh</span><span class="pl-pds">'</span></span>: <span class="pl-s"><span class="pl-pds">'</span><span class="pl-ent">insecure_enabled</span><span class="pl-pds">'</span></span>: <span class="pl-c1">false</span> <span class="pl-s"><span class="pl-pds">'</span><span class="pl-ent">routes</span><span class="pl-pds">'</span></span>: - <span class="pl-s"><span class="pl-pds">'</span>GET /dns-query<span class="pl-pds">'</span></span> - <span class="pl-s"><span class="pl-pds">'</span>POST /dns-query<span class="pl-pds">'</span></span> - <span class="pl-s"><span class="pl-pds">'</span>GET /dns-query/{ClientID}<span class="pl-pds">'</span></span> - <span class="pl-s"><span class="pl-pds">'</span>POST /dns-query/{ClientID}<span class="pl-pds">'</span></span> <span class="pl-s"><span class="pl-pds">'</span><span class="pl-ent">tls</span><span class="pl-pds">'</span></span>: <span class="pl-c"><span class="pl-c">#</span> …</span></pre></div> <p>To roll back this change, set the <code>schema_version</code> back to <code>33</code>.</p> </li> </ul> <h3>Fixed</h3> <ul> <li> <p>Incorrect forwarding of root domain requests when domain-specific upstreams are configured (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2333168478" data-permission-text="Title is private" data-url="https://github.com/AdguardTeam/AdGuardHome/issues/7058" data-hovercard-type="issue" data-hovercard-url="/AdguardTeam/AdGuardHome/issues/7058/hovercard" href="https://github.com/AdguardTeam/AdGuardHome/issues/7058">#7058</a>).</p> </li> <li> <p>The strict SNI check setting is not persisted when the TLS configuration is changed (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4207898022" data-permission-text="Title is private" data-url="https://github.com/AdguardTeam/AdGuardHome/issues/8327" data-hovercard-type="issue" data-hovercard-url="/AdguardTeam/AdGuardHome/issues/8327/hovercard" href="https://github.com/AdguardTeam/AdGuardHome/issues/8327">#8327</a>).</p> </li> <li> <p>Status reported by the launchd service implementation in cases of scheduled service restart.</p> </li> <li> <p>Fixed clients block/unblock when moving clients between allowed and disallowed lists.</p> </li> </ul> adguard-bot tag:github.com,2008:Repository/62712899/v0.108.0-b.85 2026-04-14T13:03:12Z

AdGuard Home v0.108.0-b.85

<p>Changes compared to the previous beta, v0.108.0-b.84. See <a href="https://github.com/AdguardTeam/AdGuardHome/tree/v0.108.0-b.85/CHANGELOG.md">CHANGELOG.md</a> for all changes.</p> <h2>Full changelog</h2> <h3>Security</h3> <ul> <li> <p>Frontend libraries has been updated to prevent the possibility of exploiting the vulnerability described in <a href="https://nvd.nist.gov/vuln/detail/CVE-2026-40175" rel="nofollow">CVE-2026-40175</a>.</p> </li> <li> <p>Go version has been updated to prevent the possibility of exploiting the Go vulnerabilities fixed in <a href="https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU" rel="nofollow">1.26.2</a>.</p> </li> </ul> <h3>Fixed</h3> <ul> <li> <p>Incorrect forwarding of root domain requests when domain-specific upstreams are configured (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2333168478" data-permission-text="Title is private" data-url="https://github.com/AdguardTeam/AdGuardHome/issues/7058" data-hovercard-type="issue" data-hovercard-url="/AdguardTeam/AdGuardHome/issues/7058/hovercard" href="https://github.com/AdguardTeam/AdGuardHome/issues/7058">#7058</a>).</p> </li> <li> <p>The strict SNI check setting is not persisted when the TLS configuration is changed (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4207898022" data-permission-text="Title is private" data-url="https://github.com/AdguardTeam/AdGuardHome/issues/8327" data-hovercard-type="issue" data-hovercard-url="/AdguardTeam/AdGuardHome/issues/8327/hovercard" href="https://github.com/AdguardTeam/AdGuardHome/issues/8327">#8327</a>).</p> </li> </ul> adguard-bot tag:github.com,2008:Repository/62712899/v0.108.0-b.84 2026-04-01T14:39:16Z

AdGuard Home v0.108.0-b.84

<p>Changes compared to the previous beta, v0.108.0-b.83. See <a href="https://github.com/AdguardTeam/AdGuardHome/tree/v0.108.0-b.84/CHANGELOG.md">CHANGELOG.md</a> for all changes.</p> <h2>Full changelog</h2> <h3>Changed</h3> <h4>Configuration changes</h4> <p>In this release, the schema version has changed from 33 to 34.</p> <ul> <li> <p>Added a new field <code>doh</code> in <code>http</code> configuration.</p> <div class="highlight highlight-source-yaml notranslate position-relative overflow-auto" data-snippet-clipboard-copy-content="# BEFORE: 'http': # … 'tls': # … 'allow_unencrypted_doh': false # AFTER: 'http': # … 'doh': 'insecure_enabled': false 'routes': - 'GET /dns-query' - 'POST /dns-query' - 'GET /dns-query/{ClientID}' - 'POST /dns-query/{ClientID}' 'tls': # …"><pre><span class="pl-c"><span class="pl-c">#</span> BEFORE:</span> <span class="pl-s"><span class="pl-pds">'</span><span class="pl-ent">http</span><span class="pl-pds">'</span></span>: <span class="pl-c"><span class="pl-c">#</span> …</span> <span class="pl-s"><span class="pl-pds">'</span><span class="pl-ent">tls</span><span class="pl-pds">'</span></span>: <span class="pl-c"><span class="pl-c">#</span> …</span> <span class="pl-s"><span class="pl-pds">'</span><span class="pl-ent">allow_unencrypted_doh</span><span class="pl-pds">'</span></span>: <span class="pl-c1">false</span> <span class="pl-c"><span class="pl-c">#</span> AFTER:</span> <span class="pl-s"><span class="pl-pds">'</span><span class="pl-ent">http</span><span class="pl-pds">'</span></span>: <span class="pl-c"><span class="pl-c">#</span> …</span> <span class="pl-s"><span class="pl-pds">'</span><span class="pl-ent">doh</span><span class="pl-pds">'</span></span>: <span class="pl-s"><span class="pl-pds">'</span><span class="pl-ent">insecure_enabled</span><span class="pl-pds">'</span></span>: <span class="pl-c1">false</span> <span class="pl-s"><span class="pl-pds">'</span><span class="pl-ent">routes</span><span class="pl-pds">'</span></span>: - <span class="pl-s"><span class="pl-pds">'</span>GET /dns-query<span class="pl-pds">'</span></span> - <span class="pl-s"><span class="pl-pds">'</span>POST /dns-query<span class="pl-pds">'</span></span> - <span class="pl-s"><span class="pl-pds">'</span>GET /dns-query/{ClientID}<span class="pl-pds">'</span></span> - <span class="pl-s"><span class="pl-pds">'</span>POST /dns-query/{ClientID}<span class="pl-pds">'</span></span> <span class="pl-s"><span class="pl-pds">'</span><span class="pl-ent">tls</span><span class="pl-pds">'</span></span>: <span class="pl-c"><span class="pl-c">#</span> …</span></pre></div> <p>To roll back this change, set the <code>schema_version</code> back to <code>33</code>.</p> </li> </ul> <h3>Fixed</h3> <ul> <li>Status reported by the launchd service implementation in cases of scheduled service restart.</li> </ul> adguard-bot tag:github.com,2008:Repository/62712899/v0.108.0-b.83 2026-03-13T14:51:42Z

AdGuard Home v0.108.0-b.83

<p>Changes compared to the previous beta, v0.108.0-b.82. See <a href="https://github.com/AdguardTeam/AdGuardHome/tree/v0.108.0-b.83/CHANGELOG.md">CHANGELOG.md</a> for all changes.</p> <h2>Full changelog</h2> <h3>Security</h3> <ul> <li> <p>Go version has been updated to prevent the possibility of exploiting the Go vulnerabilities fixed in <a href="https://groups.google.com/g/golang-announce/c/EdhZqrQ98hkq" rel="nofollow">1.26.1</a>.</p> </li> <li> <p>Authentication is now applied to requests that have been upgraded from HTTP/2 Cleartext (H2C) requests to public resources.</p> <p><strong>NOTE:</strong> We thank <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/mandreko/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/mandreko">@mandreko</a> for reporting this security issue.</p> </li> </ul> <h3>Fixed</h3> <ul> <li>Fixed clients block/unblock when moving clients between allowed and disallowed lists.</li> </ul> adguard-bot tag:github.com,2008:Repository/62712899/v0.107.73 2026-03-10T17:23:23Z</span>
</span>
AdGuard Home v0.107.73</span>
</span>
<p>We are releasing this hotfix to address a recently discovered critical vulnerability that could allow users to bypass authentication and gain full access to AdGuard Home without valid credentials. We strongly recommend updating your AdGuard Home clients immediately.</p> <h2>Acknowledgments</h2> <p>A special thanks to <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/mandreko/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/mandreko">@mandreko</a> for reporting the vulnerability, our community moderators team and to everyone who filed and inspected issues, added translations, and helped us test this release!</p> <h2>Full changelog</h2> <p>See also the <a href="https://github.com/AdguardTeam/AdGuardHome/milestone/108?closed=1">v0.107.73 GitHub milestone</a>.</p> <h3>Security</h3> <ul> <li> <p>Authentication is now applied to requests that have been upgraded from HTTP/2 Cleartext (H2C) requests to public resources.</p> <p><strong>NOTE:</strong> We thank <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/mandreko/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/mandreko">@mandreko</a> for reporting this security issue.</p> </li> </ul> adguard-bot tag:github.com,2008:Repository/62712899/v0.107.72 2026-02-19T15:37:49Z</span>
</span>
AdGuard Home v0.107.72</span>
</span>
<p>The first release of the year is always important — it sets the tone for the months ahead 📆</p> <p>The way we kick things off in 2026 may not be flashy, but it’s a solid mix: the new way of handling TLS certificate updates, a couple of other, minor new features, some configuration changes, a couple of key fixes, and the usual security update.</p> <p>Stay tuned for more goodies to come!</p> <h2>Acknowledgments</h2> <p>A special thanks to our community moderators team and to everyone who filed and inspected issues, added translations, and helped us test this release!</p> <h2>Full changelog</h2> <p>See also the <a href="https://github.com/AdguardTeam/AdGuardHome/milestone/107?closed=1">v0.107.72 GitHub milestone</a>.</p> <h3>Security</h3> <ul> <li>Go version has been updated to prevent the possibility of exploiting the Go vulnerabilities fixed in <a href="https://groups.google.com/g/golang-announce/c/K09ubi9FQFk" rel="nofollow">1.25.7</a>.</li> </ul> <h3>Added</h3> <ul> <li> <p>AdGuard Home now tracks the TLS certificate and key files for updates and reloads them after any updates are detected (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1084043427" data-permission-text="Title is private" data-url="https://github.com/AdguardTeam/AdGuardHome/issues/3962" data-hovercard-type="issue" data-hovercard-url="/AdguardTeam/AdGuardHome/issues/3962/hovercard" href="https://github.com/AdguardTeam/AdGuardHome/issues/3962">#3962</a>).</p> </li> <li> <p>New query parameter <code>recent</code> in <code>GET /control/stats/</code> defines statistics lookback period in millieseconds. See <code>openapi/openapi.yaml</code> for details.</p> </li> <li> <p>New field <code>"ignored_enabled"</code> in <code>GetStatsConfigResponse</code> or <code>GetQueryLogConfigResponse</code>. See <code>openapi/openapi.yaml</code> for details.</p> </li> </ul> <h3>Changed</h3> <ul> <li>In addition to modifying the contents of a hosts file, deleting or renaming the file now also updates runtime clients and DNS filtering results.</li> </ul> <h4>Configuration changes</h4> <p>In this release, the schema version has changed from 32 to 33.</p> <ul> <li> <p>Added a new boolean field <code>ignored_enabled</code> in querylog and statistics config.</p> <div class="highlight highlight-source-yaml notranslate position-relative overflow-auto" data-snippet-clipboard-copy-content="# BEFORE: 'querylog': # … 'ignored': - '|.^' 'statistics': # … 'ignored': - '|.^' # AFTER: 'querylog': # … 'ignored': - '|.^' 'ignored_enabled': true 'statistics': # … 'ignored': - '|.^' 'ignored_enabled': true ``` To roll back this change, set the `schema_version` back to `32`. "><pre><span class="pl-c"><span class="pl-c">#</span> BEFORE:</span> <span class="pl-s"><span class="pl-pds">'</span><span class="pl-ent">querylog</span><span class="pl-pds">'</span></span>: <span class="pl-c"><span class="pl-c">#</span> …</span> <span class="pl-s"><span class="pl-pds">'</span><span class="pl-ent">ignored</span><span class="pl-pds">'</span></span>: - <span class="pl-s"><span class="pl-pds">'</span>|.^<span class="pl-pds">'</span></span> <span class="pl-s"><span class="pl-pds">'</span><span class="pl-ent">statistics</span><span class="pl-pds">'</span></span>: <span class="pl-c"><span class="pl-c">#</span> …</span> <span class="pl-s"><span class="pl-pds">'</span><span class="pl-ent">ignored</span><span class="pl-pds">'</span></span>: - <span class="pl-s"><span class="pl-pds">'</span>|.^<span class="pl-pds">'</span></span> <span class="pl-c"><span class="pl-c">#</span> AFTER:</span> <span class="pl-s"><span class="pl-pds">'</span><span class="pl-ent">querylog</span><span class="pl-pds">'</span></span>: <span class="pl-c"><span class="pl-c">#</span> …</span> <span class="pl-s"><span class="pl-pds">'</span><span class="pl-ent">ignored</span><span class="pl-pds">'</span></span>: - <span class="pl-s"><span class="pl-pds">'</span>|.^<span class="pl-pds">'</span></span> <span class="pl-s"><span class="pl-pds">'</span><span class="pl-ent">ignored_enabled</span><span class="pl-pds">'</span></span>: <span class="pl-c1">true</span> <span class="pl-s"><span class="pl-pds">'</span><span class="pl-ent">statistics</span><span class="pl-pds">'</span></span>: <span class="pl-c"><span class="pl-c">#</span> …</span> <span class="pl-s"><span class="pl-pds">'</span><span class="pl-ent">ignored</span><span class="pl-pds">'</span></span>: - <span class="pl-s"><span class="pl-pds">'</span>|.^<span class="pl-pds">'</span></span> <span class="pl-s"><span class="pl-pds">'</span><span class="pl-ent">ignored_enabled</span><span class="pl-pds">'</span></span>: <span class="pl-c1">true</span> <span class="pl-s"><span class="pl-pds">`</span><span class="pl-pds">`</span><span class="pl-pds">`</span></span> <span class="pl-s"></span> <span class="pl-s">To roll back this change, set the <span class="pl-pds">`</span></span><span class="pl-s">schema_version` back to `32`.</span> </pre></div> </li> </ul> <h3>Fixed</h3> <ul> <li> <p>Executable permissions in some Docker installations (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3897632162" data-permission-text="Title is private" data-url="https://github.com/AdguardTeam/AdGuardHome/issues/8237" data-hovercard-type="issue" data-hovercard-url="/AdguardTeam/AdGuardHome/issues/8237/hovercard" href="https://github.com/AdguardTeam/AdGuardHome/issues/8237">#8237</a>).</p> </li> <li> <p>Unknown blocked services from both global and client configuration now logged instead of causing server crash.</p> </li> </ul> adguard-bot</span>
<p>Changes compared to the previous beta, v0.108.0-b.82. See <a href="https://github.com/AdguardTeam/AdGuardHome/tree/v0.108.0-b.83/CHANGELOG.md">CHANGELOG.md</a> for all changes.</p> <h2>Full changelog</h2> <h3>Security</h3> <ul> <li> <p>Go version has been updated to prevent the possibility of exploiting the Go vulnerabilities fixed in <a href="https://groups.google.com/g/golang-announce/c/EdhZqrQ98hkq" rel="nofollow">1.26.1</a>.</p> </li> <li> <p>Authentication is now applied to requests that have been upgraded from HTTP/2 Cleartext (H2C) requests to public resources.</p> <p><strong>NOTE:</strong> We thank <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/mandreko/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/mandreko">@mandreko</a> for reporting this security issue.</p> </li> </ul> <h3>Fixed</h3> <ul> <li>Fixed clients block/unblock when moving clients between allowed and disallowed lists.</li> </ul> adguard-bot</span>