Pi-hole LLC has 7 CVEs on record between 2025 and 2026. 3 were published in the last 90 days. The busiest recent month was October 2026 with 3. The median CVSS is 7.8 (high), with 1 rated critical. None have a confirmed exploitation report. Most affected products: pi-hole (3), web_interface (3), Web (1).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 7.8
- Publish → KEV
- —
- Last 90 days
- 3 prev 0
Worst active — by depth score
CVE-2025-34087Critical· 9.0Pi-Hole AdminLTE Whitelist (now 'Web Allowlist') Remote Command Execution63CVE-2026-119335High· 7.8Pi-hole: Local privilege escalation from `pihole` user to root via CVE-2026-41489 fix bypass55CVE-2025-53533Medium· 6.1Pi-hole Admin Interface is a web interface for managing Pi-hole, a network-level advertisement and internet tracker blocking application46CVE-2025-59151High· 8.2Pi-hole Admin Interface is a web interface for managing Pi-hole, a network-level advertisement and internet tracker blocking application45CVE-2026-119336High· 7.8Pi-hole: arbitrary root file clobber / chmod / disclosure via updatecheck.sh cron following /etc/pihole/versions symlink43
Pi-hole LLC vulnerabilities
CVEs affecting Pi-hole LLC, newest first. Open any entry for full detail, references, and exploit status.
7 CVEsRSS
CVE-2026-119335High· 7.8PoCPi-hole: Local privilege escalation from `pihole` user to root via CVE-2026-41489 fix bypass
Pi-hole is a DNS sinkhole that protects devices from unwanted content without installing any client-side software. Prior to 6.5, advanced/Scripts/utils.sh getFTLPID() attempts to validate the pihole-owned /run/pihole-FTL.pid file with ex…
CVE-2026-119334Low· 2.2Pi-hole: file:// adlist read check and curl can resolve different files
Pi-hole is a DNS sinkhole that protects devices from unwanted content without installing any client-side software. Prior to 6.5, gravity.sh checks file:// adlist readability with sudo -u pihole test -r but then allows curl, sometimes run…
CVE-2026-119336High· 7.8Pi-hole: arbitrary root file clobber / chmod / disclosure via updatecheck.sh cron following /etc/pihole/versions symlink
Pi-hole is a DNS sinkhole that protects devices from unwanted content without installing any client-side software. From 6.4.2 until 6.5, the root-run advanced/Scripts/updatecheck.sh cron job applies truncate -s 0 and chmod 644 to /etc/pi…
CVE-2025-59151High· 8.2Pi-hole Admin Interface is a web interface for managing Pi-hole, a network-level advertisement and internet tracker blocking application
Pi-hole Admin Interface is a web interface for managing Pi-hole, a network-level advertisement and internet tracker blocking application. Pi-hole Admin Interface before 6.3 is vulnerable to Carriage Return Line Feed (CRLF) injection. Whe…
CVE-2025-53533Medium· 6.1PoCPi-hole Admin Interface is a web interface for managing Pi-hole, a network-level advertisement and internet tracker blocking application
Pi-hole Admin Interface is a web interface for managing Pi-hole, a network-level advertisement and internet tracker blocking application. Pi-hole Admin Interface versions 6.2.1 and earlier are vulnerable to reflected cross-site scripting…
CVE-2025-32785Medium· 5.4Pi-hole Admin Interface is a web interface for managing Pi-hole, a network-level advertisement and internet tracker blocking application
Pi-hole Admin Interface is a web interface for managing Pi-hole, a network-level advertisement and internet tracker blocking application. Pi-hole Admin Interface versions prior to 6.3 are vulnerable to cross-site scripting (XSS) via the …
CVE-2025-34087Critical· 9.0PoCPi-Hole AdminLTE Whitelist (now 'Web Allowlist') Remote Command Execution
An authenticated command injection vulnerability exists in Pi-hole versions up to 3.3. When adding a domain to the allowlist via the web interface, the domain parameter is not properly sanitized, allowing an attacker to append OS command…