CVE-2024-34361

HIGH

Pi-hole <5.18.3 - Command Injection

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2024-34361. PoCs published by T0X1Cx.

AI-analyzed exploit summary This repository contains a functional exploit for CVE-2024-34361, leveraging SSRF in Pi-hole to achieve RCE via Redis manipulation and Gopherus protocol. The exploit automates login, CSRF token extraction, payload delivery, and execution.

Description

Pi-hole is a DNS sinkhole that protects devices from unwanted content without installing any client-side software. A vulnerability in versions prior to 5.18.3 allows an authenticated user to make internal requests to the server via the `gravity_DownloadBlocklistFromUrl()` function. Depending on some circumstances, the vulnerability could lead to remote command execution. Version 5.18.3 contains a patch for this issue.

Exploits (1)

nomisec WORKING POC 1 stars
by T0X1Cx · poc
https://github.com/T0X1Cx/CVE-2024-34361-Pi-Hole-SSRF-to-RCE

This repository contains a functional exploit for CVE-2024-34361, leveraging SSRF in Pi-hole to achieve RCE via Redis manipulation and Gopherus protocol. The exploit automates login, CSRF token extraction, payload delivery, and execution.

Classification
Working Poc 95%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: Pi-hole <=5.18.2
Auth required
Prerequisites: Pi-hole admin credentials · Redis installed on target
devstral-2 · analyzed Feb 19, 2026 Full analysis →

Scores

CVSS v3 8.5
EPSS 0.0283
EPSS Percentile 84.8%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact total

Details

CWE
CWE-918
Status published
Products (1)
pi-hole/pi-hole < 5.18.3
Published Jul 05, 2024
Tracked Since Feb 18, 2026