CVE-2026-53925

{
  "id": "CVE-2026-53925",
  "sourceIdentifier": "[email protected]",
  "published": "2026-06-25T19:16:40.017",
  "lastModified": "2026-10-25T22:10:00.150",
  "vulnStatus": "Deferred",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Glances is an open-source system cross-platform monitoring tool. From 4.0.8 until 4.5.5, the secure_popen() function in glances/secure.py interprets > (file redirection), | (pipe), and && (command chaining) operators in command strings. These operators are applied without any validation on the target file path, piped command, or chained command. When Application Monitoring Process (AMP) modules load their command or service_cmd configuration values from glances.conf, those values are passed directly to secure_popen() with no sanitization. This allows an attacker who can modify the Glances configuration file to write arbitrary content to arbitrary filesystem paths (via >), chain arbitrary commands (via &&), or pipe command output to arbitrary programs (via |). This vulnerability is fixed in 4.5.5."
    },
    {
      "lang": "es",
      "value": "Glances es una herramienta de monitoreo de sistema de código abierto multiplataforma. Desde la versión 4.0.8 hasta la 4.5.5, la función secure_popen() en glances/secure.py interpreta los operadores > (redirección de archivo), | (tubería) y && (encadenamiento de comandos) en las cadenas de comandos. Estos operadores se aplican sin ninguna validación sobre la ruta del archivo de destino, el comando canalizado o el comando encadenado. Cuando los módulos del Proceso de Monitoreo de Aplicaciones (AMP) cargan sus valores de configuración ’command’ o ’service_cmd’ desde glances.conf, esos valores se pasan directamente a secure_popen() sin ninguna sanitización. Esto permite a un atacante que puede modificar el archivo de configuración de Glances escribir contenido arbitrario en rutas arbitrarias del sistema de archivos (a través de >), encadenar comandos arbitrarios (a través de &&) o canalizar la salida de comandos a programas arbitrarios (a través de |). Esta vulnerabilidad se corrigió en la versión 4.5.5."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "nicolargo",
          "product": "glances",
          "versions": [
            {
              "version": ">= 4.0.8, < 4.5.5",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "baseScore": 7.8,
          "baseSeverity": "HIGH",
          "attackVector": "LOCAL",
          "attackComplexity": "LOW",
          "privilegesRequired": "LOW",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "availabilityImpact": "HIGH"
        },
        "exploitabilityScore": 1.8,
        "impactScore": 5.9
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-06-25T18:25:09.523064Z",
          "id": "CVE-2026-53925",
          "options": [
            {
              "exploitation": "poc"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Primary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-22"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://github.com/nicolargo/glances/security/advisories/GHSA-3vwc-qwhc-3mj7",
      "source": "[email protected]"
    },
    {
      "url": "https://github.com/nicolargo/glances/security/advisories/GHSA-3vwc-qwhc-3mj7",
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
    }
  ]
}