Vulnerability in Nicolargo Glances
CVE-2026-33533
Glances is an open-source system cross-platform monitoring tool. Prior to version 4.5.3, the Glances XML-RPC server (activated with glances -s or glances --server) sends Access-Control-Allow-Origin: * on every HTTP response. Because the XM…
EPSS: 0.000 (15.2th percentile) — read the EPSS interpretation.
Affected products
- Nicolargo Glances — versions < 4.5.3
Weakness classification (CWE)
References
- https://github.com/nicolargo/glances/security/advisories/GHSA-7p93-6934-f4q7 (x_refsource_CONFIRM)
- https://github.com/nicolargo/glances/commit/dcb39c3f12b2a1eec708c58d22d7a1d62bdf5fa1 (x_refsource_MISC)
- https://github.com/nicolargo/glances/releases/tag/v4.5.3 (x_refsource_MISC)