Advisories · Technology
pi-hole.
Every CVE that names pi-hole among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.8 High
Pi-hole: arbitrary root file clobber / chmod / disclosure via updatecheck.sh cron following /etc/pihole/versions symlink
- pi-hole
- Path traversal
- CWE-61
- CVSS 7.8 High
Pi-hole: Local privilege escalation from `pihole` user to root via CVE-2026-41489 fix bypass
- pi-hole
- Command injection
- CVSS 2.2 Low
Pi-hole: file:// adlist read check and curl can resolve different files
- pi-hole
- Path traversal
- CVSS 8.8 High
Pi-hole: Local privilege escalation from `pihole` user to root via `/etc/pihole/logrotate`
- pi-hole
- CWE-282
- CVSS 8.8 High
Pi-hole: Local privilege escalation via config-controlled path in root-executed service hooks
- pi-hole
- Privilege escalation
- Broken access control
- CVSS 6.4 Medium
Pi-hole has a Local Privilege Escalation (post-compromise, pihole -> root).
- pi-hole
- Privilege escalation
- CVSS 8.6 High
Pi-hole Blind Server-Side Request Forgery (SSRF) vulnerability can lead to Remote Code Execution (RCE)
- pi-hole
- Server-side request forgery (SSRF)
- CVSS 7.6 High
Pihole Authenticated Arbitrary File Read with root privileges
- pi-hole
- Information disclosure
- Privilege escalation
- CVSS 6.3 Medium
Multiple Privilege Escalation Vulnerabilities Pihole
- pi-hole
- Privilege escalation