Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Pi-hole is a DNS sinkhole that protects devices from unwanted content without installing any client-side software. From 6.0 to 6.4.2, a user with code execution as the unprivileged pihole user can escalate to root by replacing /etc/pihole/logrotate. The replacement is laundered to root:root ownership by pihole-FTL-prestart.sh and then parsed as root by the daily pihole flush cron, executing firstaction shell as uid 0. This issue is fixed in version 6.4.3.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-50130 Local Privilege Escalation in Pi-hole 6.0 Through 6.4.2 via Logrotate Manipulation https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-50130
Post summary
The text announces CVE‑2026‑50130, detailing a local privilege escalation flaw in Pi‑hole versions 6.0 through 6.4.2 via logrotate manipulation, without providing exploit code, patches, or evidence of active exploitation.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | pi-hole | pi-hole | - | - | - |