Glances is an open-source system cross-platform monitoring tool. Prior to version 4.5.4, a Server-Side Request Forgery (SSRF) vulnerability exists in the Glances IP plugin due to improper validation of the public_api configuration parameter. The value of public_api is used directly in outbound HTTP requests without any scheme restriction or hostname/IP validation. An attacker who can modify the Glances configuration can force the application to send requests to arbitrary internal or external endpoints. Additionally, when public_username and public_password are set, Glances automatically includes these credentials in the Authorization: Basic header, resulting in credential leakage to attacker-controlled servers. This vulnerability can be exploited to access internal network services, retrieve sensitive data from cloud metadata endpoints, and/or exfiltrate credentials via outbound HTTP requests. The issue arises because public_api is passed directly to the HTTP client (urlopen_auth) without validation, allowing unrestricted outbound connections and unintended disclosure of sensitive information. Version 4.5.4 contains a patch.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Glances is an open-source system cross-platform monitoring tool. Prior to version 4.5.4, a Server-Side     Request Forgery (SSRF) vulnerability exists in the Glances IP plugin due to improper validation of the     public_api configuration parameter. The value of public_api is used directly in outbound HTTP requests     without any scheme restriction or hostname/IP validation. An attacker who can modify the Glances     configuration can force the application to send requests to arbitrary internal or external endpoints.
    Additionally, when public_username and public_password are set, Glances automatically includes these     credentials in the Authorization: Basic header, resulting in credential leakage to attacker-controlled     servers. This vulnerability can be exploited to access internal network services, retrieve sensitive data     from cloud metadata endpoints, and/or exfiltrate credentials via outbound HTTP requests. The issue arises     because public_api is passed directly to the HTTP client (urlopen_auth) without validation, allowing     unrestricted outbound connections and unintended disclosure of sensitive information. Version 4.5.4     contains a patch. (CVE-2026-35587)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Glances is an open-source system cross-platform monitoring tool. Prior to version 4.5.4, a Server-Side
    Request Forgery (SSRF) vulnerability exists in the Glances IP plugin due to improper validation of the
    public_api configuration parameter. The value of public_api is used directly in outbound HTTP requests
    without any scheme restriction or hostname/IP validation. An attacker who can modify the Glances
    configuration can force the application to send requests to arbitrary internal or external endpoints.
    Additionally, when public_username and public_password are set, Glances automatically includes these
    credentials in the Authorization: Basic header, resulting in credential leakage to attacker-controlled
    servers. This vulnerability can be exploited to access internal network services, retrieve sensitive data
    from cloud metadata endpoints, and/or exfiltrate credentials via outbound HTTP requests. The issue arises
    because public_api is passed directly to the HTTP client (urlopen_auth) without validation, allowing
    unrestricted outbound connections and unintended disclosure of sensitive information. Version 4.5.4
    contains a patch. (CVE-2026-35587)

ID	Name	Product	Family	Severity
309692	Linux Distros Unpatched Vulnerability : CVE-2026-35587	Nessus	Misc.	high
440708	SCA: security update for glances (GHSA-g5pq-48mj-jvw8)	Tenable Cloud Security	SCA Checks	high
440708	SCA: security update for glances (GHSA-g5pq-48mj-jvw8)	Tenable Self-Hosted Container Security	SCA Checks	high

Detections

Analytics

CVE-2026-35587

high

Tenable Plugins

high

high

high