CVE-2021-29449

HIGH 7.8CVE-2021-29449 · Published 14/04/2021 · updated 17/06/2026

In short

CVE-2021-29449 is a HIGH (CVSS 7.8) vulnerability affecting pi-hole (pi-hole).
Chance of exploitation in the next 30 days (EPSS): 1.8%, higher than 79.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
pi-hole pi-hole	`≤ 5.2.4`	No fix yet

Description

Pi-hole is a Linux network-level advertisement and Internet tracker blocking application. Multiple privilege escalation vulnerabilities were discovered in version 5.2.4 of Pi-hole core. See the referenced GitHub security advisory for details.

References

pi-hole/pi-hole security advisory · Exploit
packetstormsecurity.com/files/163715/Pi-Hole-Remove-Commands-Linux-Privilege-Escalation.html · Exploit
compass-security.com/fileadmin/Research/Advisories/2021-02_CSNC-2021-008_Pi-hole_Privilege_Escalation.txt · Exploit

More vulnerabilities in pi-hole

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

pi-hole

≤ 5.2.4

No fix yet

More vulnerabilities in pi-hole

See all →