Cross-platform Monitoring Tool Vulnerability in Glances by Nicolargo

CVE-2026-32634

What is CVE-2026-32634?

Glances, an open-source cross-platform monitoring tool, contains a vulnerability that affects its Central Browser mode. Prior to version 4.5.2, the application inadvertently stores the untrusted server name advertised through Zeroconf, using this name rather than the verified IP address when building connection URIs. This flaw may enable attackers on the same local network to present a fraudulent Glances service, resulting in the automatic transmission of reusable Glances authentication secrets to the attacker's controlled host, potentially compromising sensitive data. Version 4.5.2 addresses this issue, enhancing the security of user credentials through improved name verification.

References