CVE-2020-8816VulnerabilityPublished 12/10/2021Updated 10/24/2026

CVE-2020-8816: Pi-Hole AdminLTE Remote Code Execution Vulnerability

Affects Pi-hole AdminLTESource CISA KEV

Severity

High

No CVSS score published yet

Exploitation: Actively exploited – in CISA KEV since 12/10/2021
KEV deadline: 06/10/2022
EPSS: 78.3% chance of exploitation in 30 days – higher than 99% of CVEs

What to do

CISA required action

Apply updates per vendor instructions.

nvd.nist.gov/vuln/detail/CVE-2020-8816 (opens in a new tab)

Description

Pi-hole Web version 4.3.2 (AdminLTE) contains a remote code execution vulnerability that allows privileged dashboard users to execute arbitrary code via a crafted DHCP static lease. This vulnerability has been exploited in the wild.

Summary

CVE-2020-8816 is a remote code execution vulnerability in Pi-hole Web v4.3.2 (AdminLTE). It allows users with dashboard privileges to execute arbitrary code by submitting a specially crafted DHCP static lease. The vulnerability is identified as CWE-78 (Improper Neutralization of Special Elements used in an OS Command). Exploitation has been observed in the wild.

Impact

An attacker with privileged access to the Pi-hole AdminLTE dashboard can execute arbitrary code on the affected system, potentially leading to full system compromise. This can result in unauthorized control over the Pi-hole server and its network environment.

Mitigation

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict dashboard access to trusted users only and monitor for suspicious activity related to DHCP static lease configurations.

Weaknesses

CWE-78OS Command Injection (opens in a new tab)

What to do

Description

AnalysisAI-generated, updated 10/24/2026, 09:55:44 UTC

Weaknesses

References

Related threats