CVE-2026-32608
Glances is an open-source system cross-platform monitoring tool.
Published Mar 18, 2026 · updated Jun 17, 2026 · nicolargo glances
Glances is an open-source system cross-platform monitoring tool. The Glances action system allows administrators to configure shell commands that execute when monitoring thresholds are exceeded. These commands support Mustache template variables (e.g., , ) that are populated with runtime monitoring data. The function, which executes these commands, implements its own pipe, redirect, and chain operator handling by splitting the command string before passing each segment to . Prior to 4.5.2, when a Mustache-rendered value (such as a process name, filesystem mount point, or container name) contains pipe, redirect, or chain metacharacters, the rendered command is split in unintended ways, allowing an attacker who controls a process name or container name to inject arbitrary commands. Version 4.5.2 fixes the issue.
Code
The project this record applies to. Exploit listings stay in References.
Timeline
Detection, updates, and resolution for this record.
Mar 18, 2026 · NIST NVD
Detected
Glances is an open-source system cross-platform monitoring tool. The Glances action system allows administrators to configure shell commands that execute when monitoring thresholds are exceeded. These commands support Mustache template variables (e.g., , ) that are populated with runtime monitoring data. The function, which executes these commands, implements its own pipe, redirect, and chain oper
Jun 17, 2026 · NIST NVD
Updated
Glances is an open-source system cross-platform monitoring tool. The Glances action system allows administrators to configure shell commands that execute when monitoring thresholds are exceeded. These commands support Mustache template variables (e.g., , ) that are populated with runtime monitoring data. The function, which executes these commands, implements its own pipe, redirect, and chain oper
Affected
- cpe nicolargo/glancesversion unspecified
Sources
- CVE.orgVulnerability recordCVE-2026-32608
Official CVE identifier
cve.org - NIST NVDVulnerability recordCVE-2026-32608
Glances is an open-source system cross-platform monitoring tool. The Glances action system allows administrators to configure shell commands that execute when monitoring thresholds are exceeded. These commands support Mustache template variables (e.g., , ) that
nvd.nist.gov