CVE-2026-35588

Glances is an open-source system cross-platform monitoring tool. Prior to version 4.5.4, the Cassandra export module (`glances/exports/glances_cassandra/__init__.py`) interpolates `keyspace`, `table`, and `replication_factor` configuration values directly into CQL statements without validation. A user with write access to `glances.conf` can redirect all monitoring data to an attacker-controlled Cassandra keyspace. Version 4.5.4 contains a fix.

CVSS v3 6.3 MEDIUM

6.3^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 0.8 / Impact : 5.5

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact LOW

Scope UNCHANGED

References

Link	Resource
https://github.com/nicolargo/glances/commit/d339181f03a14bb15506307e9d58f876e23d8160	Patch
https://github.com/nicolargo/glances/commit/e41b665576f9fd5374e3152078726cc59a01e48c	Patch
https://github.com/nicolargo/glances/security/advisories/GHSA-grp3-h8m8-45p7	Exploit Mitigation Vendor Advisory
https://github.com/nicolargo/glances/security/advisories/GHSA-grp3-h8m8-45p7	Exploit Mitigation Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:nicolargo:glances:*:*:*:*:*:*:*:*

History

26 Oct 2026, 22:10

Type	Values Removed	Values Added
Summary		(es) Glances es una herramienta de monitorización de sistemas multiplataforma de código abierto. Antes de la versión 4.5.4, el módulo de exportación de Cassandra (glances/exports/glances_cassandra/__init__.py) interpola los valores de configuración ’keyspace’, ’table’ y ’replication_factor’ directamente en las sentencias CQL sin validación. Un usuario con acceso de escritura a ’glances.conf’ puede redirigir todos los datos de monitorización a un keyspace de Cassandra controlado por un atacante. La versión 4.5.4 contiene una corrección.

Information

Published : 2026-04-21 00:16

Updated : 2026-10-26 22:10

NVD link : CVE-2026-35588

Mitre link : CVE-2026-35588

CVE.ORG link : CVE-2026-35588

JSON object : View

Products Affected

nicolargo

glances

CWE

CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

{"id": "CVE-2026-35588", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-35588", "role": "CISA Coordinator", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-04-21T13:35:00.699295Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.3, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 5.5, "exploitabilityScore": 0.8}]}, "affected": [{"source": "security-advisories@github.com", "affectedData": [{"vendor": "nicolargo", "product": "glances", "versions": [{"status": "affected", "version": "< 4.5.4"}]}]}], "published": "2026-04-21T00:16:29.163", "references": [{"url": "https://github.com/nicolargo/glances/commit/d339181f03a14bb15506307e9d58f876e23d8160", "tags": ["Patch"], "source": "security-advisories@github.com"}, {"url": "https://github.com/nicolargo/glances/commit/e41b665576f9fd5374e3152078726cc59a01e48c", "tags": ["Patch"], "source": "security-advisories@github.com"}, {"url": "https://github.com/nicolargo/glances/security/advisories/GHSA-grp3-h8m8-45p7", "tags": ["Exploit", "Mitigation", "Vendor Advisory"], "source": "security-advisories@github.com"}, {"url": "https://github.com/nicolargo/glances/security/advisories/GHSA-grp3-h8m8-45p7", "tags": ["Exploit", "Mitigation", "Vendor Advisory"], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-89"}]}], "descriptions": [{"lang": "en", "value": "Glances is an open-source system cross-platform monitoring tool. Prior to version 4.5.4, the Cassandra export module (`glances/exports/glances_cassandra/__init__.py`) interpolates `keyspace`, `table`, and `replication_factor` configuration values directly into CQL statements without validation. A user with write access to `glances.conf` can redirect all monitoring data to an attacker-controlled Cassandra keyspace. Version 4.5.4 contains a fix."}, {"lang": "es", "value": "Glances es una herramienta de monitorizaci\u00f3n de sistemas multiplataforma de c\u00f3digo abierto. Antes de la versi\u00f3n 4.5.4, el m\u00f3dulo de exportaci\u00f3n de Cassandra (glances/exports/glances_cassandra/__init__.py) interpola los valores de configuraci\u00f3n \u2019keyspace\u2019, \u2019table\u2019 y \u2019replication_factor\u2019 directamente en las sentencias CQL sin validaci\u00f3n. Un usuario con acceso de escritura a \u2019glances.conf\u2019 puede redirigir todos los datos de monitorizaci\u00f3n a un keyspace de Cassandra controlado por un atacante. La versi\u00f3n 4.5.4 contiene una correcci\u00f3n."}], "lastModified": "2026-10-26T22:10:00.163", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:nicolargo:glances:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "03B811B3-8AF9-4B29-A6F5-A2348591DCCE", "versionEndExcluding": "4.5.4"}], "operator": "OR"}]}], "sourceIdentifier": "security-advisories@github.com"}