Cross-Origin Request Vulnerability in Glances Monitoring Tool by Glances

CVE-2026-32610

What is CVE-2026-32610?

The Glances monitoring tool, prior to version 4.5.2, is susceptible to a cross-origin resource sharing (CORS) misconfiguration in its REST API. The default CORS setup permits the use of wildcard origins alongside credentialed requests, leading to potential security risks. This flaw allows any website to execute cross-origin API requests with user credentials, which may result in unauthorized access to sensitive system monitoring data, configuration secrets, and even command line arguments from any active browser session connected to a Glances instance. The issue is resolved in version 4.5.2.

References