6.3

CVSS Score

3.1

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2026-35588

CVE-2026-35588: Glances has CQL Injection in its Cassandra Export Module via Unsanitized Config Values

Glances is an open-source system cross-platform monitoring tool. Prior to version 4.5.4, the Cassandra export module (glances/exports/glances_cassandra/__init__.py) interpolates keyspace, table, and replication_factor configuration values directly into CQL statements without validation. A user with write access to glances.conf can redirect all monitoring data to an attacker-controlled Cassandra keyspace. Version 4.5.4 contains a fix.

(GitHub Advisory)

Miggo Vulnerability Database

→

CVE-2026-35588

CVE-2026-35588:

6.3

CVSS Score

3.1

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
glances	pip	< 4.5.4	4.5.4

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability lies in the glances.exports.glances_cassandra.Export class, specifically within its __init__ method. This method reads configuration parameters such as keyspace, table, and replication_factor directly from the glances.conf file. The core of the vulnerability is that these values are used to dynamically construct Cassandra Query Language (CQL) statements without any prior validation or sanitization. The patch addresses this by introducing a _validate_cql_identifier function that uses a regular expression to ensure the keyspace and table names only contain safe characters. It also ensures that replication_factor is a positive integer. The __init__ method is the entry point where the tainted data is introduced, making it the primary vulnerable function. The exploitation of this vulnerability would involve an attacker modifying the glances.conf file to inject malicious CQL, which would then be executed when Glances exports data to Cassandra.

Vulnerable functions

Export.__init__

glances/exports/glances_cassandra/__init__.py

The `__init__` function in the `Export` class is vulnerable to CQL injection. It processes configuration values for `keyspace`, `table`, and `replication_factor` from `glances.conf` without proper sanitization. An attacker with write access to the configuration file can set these values to malicious CQL code. When the application constructs CQL queries using these tainted values, it can lead to data exfiltration, data loss, or remote code execution.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.