Information Disclosure in Glances Monitoring Tool by Nicolargo

CVE-2026-68520

What is CVE-2026-68520?

The Glances monitoring tool, an open-source system designed for cross-platform performance tracking, exhibits a vulnerability where the as_dict_secure() method in glances/config.py fails to properly validate the confidentiality of sensitive configuration data. This flaw enables unauthorized users to gain access to the public_username and other credentials embedded within public_api values via unauthenticated GET requests to /api/4/config and /api/4/config/ip endpoints. The vulnerability was resolved in version 4.5.6, enhancing the overall security of the application.

References