Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2026-32596

Glances exposes the REST API without authentication

Description

Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.2, Glances web server runs without authentication by default when started with `glances -w`, exposing REST API with sensitive system information including process command-lines containing credentials (passwords, API keys, tokens) to any network client. Version 4.5.2 fixes the issue.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

nicolargo glances

  • < 4.5.2affected

References