Executive brief
Glances's Browser API Exposes Reusable Downstream Credentials via `/api/4/serverslist`
Affected products
- PyPI glances
Junglewise Threat Intelligence
CVE-2026-32633: PYSEC-2026-343 - Glances's Browser API Exposes Reusable Downstream Credentials via `/api/4/serverslist`
CVE-2026-32633 · Severity: low · CVSS 3.1 · Published 2026-06-29
Technologies: glances (PyPI). Vendors: PyPI.
Related threats
- Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.6, as_dict_secure() in glances/config.py checks only option na
- Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.6, GlancesActions.run() in glances/actions.py ignores --disabl
- Glances is an open-source system cross-platform monitoring tool. From 4.5.2 until 4.5.6, _sanitize_mustache_dict() in glances/actions.py ski
- Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.6, _sanitize_mustache_dict() in glances/actions.py sanitizes i
- Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.6, the cors_origins guard in glances/outputs/glances_restful_a