{
  "affected": [
    {
      "ranges": [
        {
          "database_specific": {
            "extracted_events": [
              {
                "introduced": "6.0.0"
              },
              {
                "fixed": "6.4.3"
              }
            ],
            "source": [
              "AFFECTED_FIELD",
              "REFERENCES"
            ]
          },
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "18002bf7c6bf382fe5861d01321f427019e1be89"
            },
            {
              "fixed": "f47b8ede5a8e38f9c703202d324a074dbdba4ca9"
            }
          ],
          "repo": "https://github.com/pi-hole/pi-hole",
          "type": "GIT"
        }
      ]
    }
  ],
  "aliases": [
    "GHSA-h8w9-qx2v-wrww"
  ],
  "database_specific": {
    "cna_assigner": "GitHub_M",
    "cwe_ids": [
      "CWE-282"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/50xxx/CVE-2026-50130.json"
  },
  "details": "Pi-hole is a DNS sinkhole that protects devices from unwanted content without installing any client-side software. From 6.0 to 6.4.2, a user with code execution as the unprivileged pihole user can escalate to root by replacing /etc/pihole/logrotate. The replacement is laundered to root:root ownership by pihole-FTL-prestart.sh and then parsed as root by the daily pihole flush cron, executing firstaction shell as uid 0. This issue is fixed in version 6.4.3.",
  "id": "CVE-2026-50130",
  "modified": "2026-07-17T03:41:49.600418322Z",
  "published": "2026-07-14T21:35:00.813Z",
  "references": [
    {
      "type": "WEB",
      "url": "https://github.com/pi-hole/pi-hole/releases/tag/v6.4.3"
    },
    {
      "type": "ADVISORY",
      "url": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/50xxx/CVE-2026-50130.json"
    },
    {
      "type": "ADVISORY",
      "url": "https://github.com/pi-hole/pi-hole/security/advisories/GHSA-h8w9-qx2v-wrww"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-50130"
    },
    {
      "type": "FIX",
      "url": "https://github.com/pi-hole/pi-hole/commit/18002bf7c6bf382fe5861d01321f427019e1be89"
    }
  ],
  "schema_version": "1.8.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ],
  "summary": "Pi-hole: Local privilege escalation from `pihole` user to root via `/etc/pihole/logrotate`"
}