Skip to content
OpenAdvisories

Product · pi-hole

web

11 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.0
    CVE-2025-34087 Public exploit

    Pi-Hole AdminLTE Whitelist (now 'Web Allowlist') Remote Command Execution

    An authenticated command injection vulnerability exists in Pi-hole versions up to 3.3. When adding a domain to the allowlist via the web interface, the domain parameter is not properly sanitized, allowing an attacker to append OS commands to the domain string…

    pi-hole web