CVE-2026-46607
published 2026-06-25CVE-2026-46607: Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.5, glances/outdated.py uses pickle.load() to read a version-check cache file…
PriorityP348high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
0.30%
21.9th percentile
Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.5, glances/outdated.py uses pickle.load() to read a version-check cache file stored at a predictable, world-accessible path (~/.cache/glances/glances-version.db or $XDG_CACHE_HOME/glances/glances-version.db). No integrity check, signature verification, or format validation is performed before deserialization. An attacker with write access to that path — through any of several realistic local or container-level scenarios — can plant a malicious pickle file and achieve arbitrary code execution as the OS user running Glances the next time it starts with version checking enabled (the default). This vulnerability is fixed in 4.5.5.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| glances_project | glances | >= 0 < 4.5.5 | 4.5.5 |
| nicolargo | glances | < 4.5.5 | 4.5.5 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
nicolargo glances up to 4.5.4 Pickle glances/outdated.py pickle.load deserialization (GHSA-9837-48hr-q32j)
vuldb·2026-06-26·CVSS 7.8
CVE-2026-46607 [HIGH] nicolargo glances up to 4.5.4 Pickle glances/outdated.py pickle.load deserialization (GHSA-9837-48hr-q32j)
A vulnerability was found in nicolargo glances up to 4.5.4. It has been classified as problematic. Affected by this issue is the function pickle.load of the file glances/outdated.py of the component Pickle Handler. Performing a manipulation results in deserialization.
This vulnerability is identified as CVE-2026-46607. The attack is only possible with local access. There is not any exploit available.
Upgrading the affected component is recommended.
GHSA
Glances has Insecure Pickle Deserialization in its Version Cache that Leads to Arbitrary Code Execution
ghsa·2026-06-22
CVE-2026-46607 [HIGH] CWE-502 Glances has Insecure Pickle Deserialization in its Version Cache that Leads to Arbitrary Code Execution
Glances has Insecure Pickle Deserialization in its Version Cache that Leads to Arbitrary Code Execution
### Summary
`glances/outdated.py` uses `pickle.load()` to read a version-check cache file stored at a predictable, world-accessible path (`~/.cache/glances/glances-version.db` or `$XDG_CACHE_HOME/glances/glances-version.db`). No integrity check, signature verification, or format validation is performed before deserialization. An attacker with write access to that path — through any of several realistic local or container-level scenarios — can plant a malicious pickle file and achieve arbitrary code execution as the OS user running Glances the next time it starts with version checking enabled (the default).
---
### Details
**Affected file:** `glances/outdated.py`, method `Outdated._l
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2026-46607 glances: Glances: Arbitrary Code Execution via insecure deserialization of cache file [fedora-all]
bugzilla·2026-06-29·CVSS 7.8
CVE-2026-46607 [HIGH] CVE-2026-46607 glances: Glances: Arbitrary Code Execution via insecure deserialization of cache file [fedora-all]
CVE-2026-46607 glances: Glances: Arbitrary Code Execution via insecure deserialization of cache file [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.5, glances/outdated.py uses pickle.load() to read a version-check cache file stored at a predictable, world-accessible path (~/.cache/glances/glances-version.db or $XDG_CACHE_HOME/glances/glances-version.db). No integrity check, signature verification, or format validation is performed before deserialization. An attacker with write access to that path — through any of several rea
Bugzilla
CVE-2026-46607 glances: Glances: Arbitrary Code Execution via insecure deserialization of cache file [epel-all]
bugzilla·2026-06-29·CVSS 7.8
CVE-2026-46607 [HIGH] CVE-2026-46607 glances: Glances: Arbitrary Code Execution via insecure deserialization of cache file [epel-all]
CVE-2026-46607 glances: Glances: Arbitrary Code Execution via insecure deserialization of cache file [epel-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.5, glances/outdated.py uses pickle.load() to read a version-check cache file stored at a predictable, world-accessible path (~/.cache/glances/glances-version.db or $XDG_CACHE_HOME/glances/glances-version.db). No integrity check, signature verification, or format validation is performed before deserialization. An attacker with write access to that path — through any of several reali
Bugzilla
CVE-2026-46607 glances: Glances: Arbitrary Code Execution via insecure deserialization of cache file
bugzilla·2026-06-25·CVSS 7.8
CVE-2026-46607 [HIGH] CVE-2026-46607 glances: Glances: Arbitrary Code Execution via insecure deserialization of cache file
CVE-2026-46607 glances: Glances: Arbitrary Code Execution via insecure deserialization of cache file
Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.5, glances/outdated.py uses pickle.load() to read a version-check cache file stored at a predictable, world-accessible path (~/.cache/glances/glances-version.db or $XDG_CACHE_HOME/glances/glances-version.db). No integrity check, signature verification, or format validation is performed before deserialization. An attacker with write access to that path — through any of several realistic local or container-level scenarios — can plant a malicious pickle file and achieve arbitrary code execution as the OS user running Glances the next time it starts with version checking enabled (the default). This vulnerability is f
2026-06-25
Published