{"id":"CVE-2026-119334","aliases":[],"cve":{"records":[{"id":"CVE-2026-119334","source":"GitHub_M","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-10-29T20:44:30.285Z","published":"2026-10-30T20:01:59.115Z","modified":"2026-10-30T20:01:59.115Z"}],"publishers":[{"name":"GitHub_M","role":"CNA","organizationId":"a0819718-46f1-4df5-94e2-005712e83aaa","modified":"2026-10-30T20:01:59.115Z"}],"references":[{"url":"https://github.com/pi-hole/pi-hole/security/advisories/GHSA-g63w-24cr-p3w6","tags":["x_refsource_CONFIRM"],"source":"GitHub_M"},{"url":"https://github.com/pi-hole/pi-hole/pull/6719","tags":["x_refsource_MISC"],"source":"GitHub_M"},{"url":"https://github.com/pi-hole/pi-hole/commit/14554737be53c392abffc69677f6b9df02ae7971","tags":["x_refsource_MISC"],"source":"GitHub_M"},{"url":"https://github.com/pi-hole/pi-hole/releases/tag/v6.5","tags":["x_refsource_MISC"],"source":"GitHub_M"}],"weaknesses":[{"id":"CWE-59","description":"CWE-59: Improper Link Resolution Before File Access ('Link Following')","source":"GitHub_M"}],"applicability":[],"prioritization":[]},"title":"Pi-hole: file:// adlist read check and curl can resolve different files","titleSource":"GitHub_M","descriptionSource":"GitHub_M","description":"Pi-hole is a DNS sinkhole that protects devices from unwanted content without installing any client-side software. Prior to 6.5, gravity.sh checks file:// adlist readability with sudo -u pihole test -r but then allows curl, sometimes running as root, to normalize URL dot segments and open a different file. A pihole-readable decoy can therefore pass the check while curl reads a root-only target, and /proc/self paths can similarly resolve against different processes. Exploitation requires an administrator who can add adlists and can place a symlink and decoy on the filesystem. This issue is fixed in version 6.5.","score":2.2,"severity":"low","published":"2026-10-30T20:01:59.115Z","modified":"2026-10-30T20:01:59.115Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"pi-hole","name":"pi-hole","platforms":[],"versions":[{"version":"< 6.5","status":"affected"}],"cpes":[],"source":"GitHub_M","url":"https://www.cve.org/CVERecord?id=CVE-2026-119334"}],"remediation":[],"references":["https://github.com/pi-hole/pi-hole/security/advisories/GHSA-g63w-24cr-p3w6","https://github.com/pi-hole/pi-hole/pull/6719","https://github.com/pi-hole/pi-hole/commit/14554737be53c392abffc69677f6b9df02ae7971","https://github.com/pi-hole/pi-hole/releases/tag/v6.5"],"sources":[{"name":"CVE","id":"CVE-2026-119334","modified":"2026-10-30T20:01:59.115Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-119334"}],"assessments":[{"source":"GitHub_M","vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N","score":2.2}],"sourceAffected":[],"observedAt":"2026-10-30T20:22:49.294Z","kev":{"status":"not-listed","checkedAt":"2026-10-31T09:10:30.844Z"},"coverage":[{"source":"NVD","status":"available","checkedAt":"2026-10-30T20:45:32.072Z","attemptedAt":"2026-10-30T20:45:32.072Z"},{"source":"GHSA","status":"no-result","checkedAt":"2026-10-30T20:45:32.072Z","attemptedAt":"2026-10-30T20:45:32.072Z"},{"source":"EUVD","status":"no-result","checkedAt":"2026-10-30T20:45:32.589Z","attemptedAt":"2026-10-30T20:45:32.589Z"},{"source":"EPSS","status":"no-result","checkedAt":"2026-10-30T20:45:32.072Z","attemptedAt":"2026-10-30T20:45:32.072Z"}],"evidence":[{"source":"NVD","id":"CVE-2026-119334","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-119334","modified":"2026-10-30T20:17:07.967","score":2.2,"vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N","checkedAt":"2026-10-30T20:45:32.072Z"}],"aiSummary":{"text":"Pi-hole versions before 6.5 have a weakness where an administrator can create a decoy file and symlink to read a different file, potentially a root-only file. The issue arises from a discrepancy between the file readability check and curl's file resolution. Exploitation requires administrator access to add adlists and create files on the filesystem.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-10-31T05:11:05.071Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-119334"}]}}