Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.6, _sanitize_mustache_dict() in glances/actions.py sanitizes individual Mustache values before chevron.render(), allowing adjacent unescaped Mustache variables to reconstruct shell operators that secure_popen() executes when attacker-controlled process or container fields are rendered by an administrator-configured action template. This issue is fixed in 4.5.6.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.6, _sanitize_mustache_dict()     in glances/actions.py sanitizes individual Mustache values before chevron.render(), allowing adjacent     unescaped Mustache variables to reconstruct shell operators that secure_popen() executes when attacker-     controlled process or container fields are rendered by an administrator-configured action template. This     issue is fixed in 4.5.6. (CVE-2026-68518)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.6, _sanitize_mustache_dict()
    in glances/actions.py sanitizes individual Mustache values before chevron.render(), allowing adjacent
    unescaped Mustache variables to reconstruct shell operators that secure_popen() executes when attacker-
    controlled process or container fields are rendered by an administrator-configured action template. This
    issue is fixed in 4.5.6. (CVE-2026-68518)

ID	Name	Product	Family	Type	Severity
337168	Linux Distros Unpatched Vulnerability : CVE-2026-68518	Nessus	Misc.	Local	high
446024	SCA: security update for glances (GHSA-qcpp-8x79-hhp3)	Tenable Cloud Security	SCA Checks	Local	high
446024	SCA: security update for glances (GHSA-qcpp-8x79-hhp3)	Tenable Self-Hosted Container Security	SCA Checks	Local	high

Detections

Analytics

CVE-2026-68518

high

Tenable Plugins

high

high

high