CVE-2026-119336

Name of the Vulnerable Software and Affected Versions Pi-hole versions 6.4.2 through 6.4.x

Description The advanced/Scripts/updatecheck.sh cron job, which runs with root privileges, performs truncate -s 0 and chmod 644 operations on the /etc/pihole/versions file. Because the process follows symbolic links within a directory owned by the pihole user, a user with pihole privileges can replace the path with a symlink. This allows an attacker to cause the root operations to truncate or create an arbitrary root-owned file, or use a race condition to make a sensitive file world-readable via the chmod operation.

Recommendations Update to version 6.5.