Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.1, the /api/4/config REST API endpoint returns the entire parsed Glances configuration file (glances.conf) via self.config.as_dict() with no filtering of sensitive values. The configuration file contains credentials for all configured backend services including database passwords, API tokens, JWT signing keys, and SSL key passwords. This vulnerability is fixed in 4.5.1.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.1, the /api/4/config REST     API endpoint returns the entire parsed Glances configuration file (glances.conf) via self.config.as_dict()     with no filtering of sensitive values. The configuration file contains credentials for all configured     backend services including database passwords, API tokens, JWT signing keys, and SSL key passwords. This     vulnerability is fixed in 4.5.1. (CVE-2026-30928)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.1, the /api/4/config REST
    API endpoint returns the entire parsed Glances configuration file (glances.conf) via self.config.as_dict()
    with no filtering of sensitive values. The configuration file contains credentials for all configured
    backend services including database passwords, API tokens, JWT signing keys, and SSL key passwords. This
    vulnerability is fixed in 4.5.1. (CVE-2026-30928)

ID	Name	Product	Family	Type	Severity
301856	Linux Distros Unpatched Vulnerability : CVE-2026-30928	Nessus	Misc.	Local	high
438539	SCA: security update for glances (GHSA-gh4x-f7cq-wwx6)	Tenable Cloud Security	SCA Checks	Local	high
438539	SCA: security update for glances (GHSA-gh4x-f7cq-wwx6)	Tenable Self-Hosted Container Security	SCA Checks	Local	high

Detections

Analytics

CVE-2026-30928

high

Tenable Plugins

high

high

high