Glances - Information Disclosure

highseverity

7.5CVSS score

1.6%likelihood of exploitation, next 30 days

76%of all CVEs are less likely

Readycheck to confirm it

Glances < 4.5.2 contains an information disclosure vulnerability caused by the web server running without authentication by default, letting remote attackers access sensitive system information including credentials, exploit requires no special privileges.

Impact

Remote attackers can access sensitive system information including credentials, risking data exposure and system compromise.

Fix

Update to version 4.5.2 or later.

How to confirm it

Send: GET {{BaseURL}}/api/4/system
Positive when: status_code == 200 and contains(content_type, "application/json") and contains_all(body, "os_name", "os_version", "hostname")
Send: GET {{BaseURL}}/api/4/processlist
Positive when: status_code == 200 and contains(content_type, "application/json") and contains_all(body, "cmdline", "cpu_times", "memory_info")

Run it with nuclei: nuclei -id CVE-2026-32596 -u <target>

The full check

id: CVE-2026-32596

info:
  name: Glances - Information Disclosure
  author: theamanrawat
  severity: high
  description: |
    Glances < 4.5.2 contains an information disclosure vulnerability caused by the web server running without authentication by default, letting remote attackers access sensitive system information including credentials, exploit requires no special privileges.
  impact: |
    Remote attackers can access sensitive system information including credentials, risking data exposure and system compromise.
  remediation: |
    Update to version 4.5.2 or later.
  reference:
    - https://github.com/nicolargo/glances/security/advisories/GHSA-wvxv-4j8q-4wjq
    - https://nvd.nist.gov/vuln/detail/CVE-2026-32596
  classification:
    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
    cvss-score: 7.5
    cve-id: CVE-2026-32596
    epss-score: 0.01584
    epss-percentile: 0.75775
    cwe-id: CWE-200
  metadata:
    verified: true
    max-request: 2
  tags: cve,cve2026,glances,exposure,unauth,vuln

flow: http(1) && http(2)

http:
  - method: GET
    path:
      - "{{BaseURL}}/api/4/system"

    matchers:
      - type: dsl
        dsl:
          - 'status_code == 200'
          - 'contains(content_type, "application/json")'
          - 'contains_all(body, "os_name", "os_version", "hostname")'
        condition: and
        internal: true

  - method: GET
    path:
      - "{{BaseURL}}/api/4/processlist"

    matchers:
      - type: dsl
        dsl:
          - 'status_code == 200'
          - 'contains(content_type, "application/json")'
          - 'contains_all(body, "cmdline", "cpu_times", "memory_info")'
        condition: and

References

Use this check only on systems you are authorised to test. Where the data comes from