CVE-2021-29449

Pi-hole is a Linux network-level advertisement and Internet tracker blocking application. Multiple privilege escalation vulnerabilities were discovered in version 5.2.4 of Pi-hole core. See the referenced GitHub security advisory for details.

• CWE-269
• CWE-78

• https://github.com/pi-hole/pi-hole/security/advisories/GHSA-3597-244c-wrpjExploit, Third Party Advisory
• https://github.com/pi-hole/pi-hole/security/advisories/GHSA-3597-244c-wrpjExploit, Third Party Advisory
• https://github.com/pi-hole/pi-hole/security/advisories/GHSA-3597-244c-wrpjExploit, Third Party Advisory
• https://github.com/pi-hole/pi-hole/security/advisories/GHSA-3597-244c-wrpjExploit, Third Party Advisory
• http://packetstormsecurity.com/files/163715/Pi-Hole-Remove-Commands-Linux-Privilege-Escalation.htmlExploit, Third Party Advisory, VDB Entry
• https://github.com/pi-hole/pi-hole/security/advisories/GHSA-3597-244c-wrpjExploit, Third Party Advisory
• https://www.compass-security.com/fileadmin/Research/Advisories/2021-02_CSNC-2021-008_Pi-hole_Privilege_Escalation.txtExploit, Third Party Advisory

Published

Apr 14, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-29443jose is an npm library providing a number of cryptographic o…5.9
• CVE-2021-29444jose-browser-runtime is an npm package which provides a numb…5.9
• CVE-2021-29445jose-node-esm-runtime is an npm package which provides a num…5.9
• CVE-2021-29446jose-node-cjs-runtime is an npm package which provides a num…5.9
• CVE-2021-29447Wordpress is an open source CMS. A user with the ability to …6.5
• CVE-2021-29448Pi-hole is a Linux network-level advertisement and Internet …8.8
• CVE-2021-29450Wordpress is an open source CMS. One of the blocks in the Wo…4.3
• CVE-2021-29451Portofino is an open source web development framework. Porto…9.1
• CVE-2021-29452a12n-server is an npm package which aims to provide a simple…6.5
• CVE-2021-29453matrix-media-repo is an open-source multi-domain media repos…6.5
• CVE-2021-29454Smarty is a template engine for PHP, facilitating the separa…8.8
• CVE-2021-29455Grassroot Platform is an application to make it faster, chea…5.3