CVE-2026-68519
Received Received - Intake

Glances Prior to 4.5.6 Command Injection via Alert Actions

Publication date: 2026-08-17

Last updated on: 2026-08-17

Assigner: GitHub, Inc.

Description
Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.6, GlancesActions.run() in glances/actions.py ignores --disable-config-exec for on-alert action commands and invokes secure_popen() with shell operators enabled, allowing configured redirection, command chaining, or pipes to execute when an alert triggers. This issue is fixed in 4.5.6.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-17
Last Modified
2026-08-17
Generated
2026-08-17
AI Q&A
2026-08-17
EPSS Evaluated
N/A
NVD
CVE-2026-68519
EUVD
EUVD-2026-60305

Affected Vendors & Products

Showing 3 associated CPEs
Vendor Product Version / Range
nicolargo glances to 4.5.6 (exc)
nicolargo glances 4.5.6
glances glances to 4.5.6 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-78 The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-68519 is a vulnerability in Glances, a system monitoring tool, affecting versions before 4.5.6. The issue occurs in the GlancesActions.run() function in glances/actions.py. When an alert triggers, the function executes on-alert action commands from the configuration file but ignores the --disable-config-exec flag. This allows shell operators like &&, |, and > to be interpreted, enabling command chaining, redirection, or file writes even when the flag is enabled.

Detection Guidance

Check Glances version with glances --version. If version is below 4.5.6, the system is vulnerable. Inspect glances.conf for on-alert action commands using shell operators like &&, |, or >. Run a test alert to see if arbitrary file creation or command execution occurs.

Impact Analysis

An attacker with access to edit the Glances configuration file could exploit this vulnerability to execute arbitrary commands or write to arbitrary files on the system running Glances. This occurs when an alert triggers and the malicious command runs with the privileges of the Glances process. For example, an attacker could create files, modify system files, or chain commands to perform further malicious actions.

Compliance Impact

This vulnerability could lead to unauthorized file manipulation or command execution, which may violate compliance requirements such as GDPR (data integrity and security) or HIPAA (system integrity and access controls). Unauthorized file writes or command execution could compromise sensitive data or system integrity, potentially resulting in regulatory violations and legal consequences.

Mitigation Strategies

Upgrade Glances to version 4.5.6 or later. Ensure --disable-config-exec is enabled in the configuration. Review glances.conf for suspicious on-alert commands and remove any shell operators. Monitor for unexpected file changes or processes.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-68519. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart