Pi-Hole AdminLTE Remote Code Execution Vulnerability

HIGH 7.2EXPLOITED (CISA KEV)CVE-2020-8816 · Published 29/05/2020 · updated 17/06/2026

Pi-Hole AdminLTE Remote Code Execution Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 10/12/2021. Patch affected systems as an emergency.

Package	Affected versions	Patched versions
pi-hole pi-hole	`≤ 4.3.2`	No fix yet

Description

Pi-hole Web v4.3.2 (aka AdminLTE) allows Remote Code Execution by privileged dashboard users via a crafted DHCP static lease.

References

packetstormsecurity.com/files/157861/Pi-Hole-4.3.2-DHCP-MAC-OS-Command-Execution.html · Third Party Advisory
packetstormsecurity.com/files/158737/Pi-hole-4.3.2-Remote-Code-Execution.html · Third Party Advisory
pi-hole/AdminLTE · Patch
pi-hole/AdminLTE#1165 · Patch
pi-hole/AdminLTE release v4.3.3 · Release Notes
natedotred.wordpress.com/2020/03/28/cve-2020-8816-pi-hole-remote-code-execution · Broken Link
twitter.com/Nate_Kappa/status/1243900213665902592 · Broken Link
cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
CISA KEV · CVE-2020-8816

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free