7.8

CVSS Score

3.1

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2026-46607

CVE-2026-46607: Glances: Insecure Pickle Deserialization in Version Cache Leads to Arbitrary Code Execution

Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.5, glances/outdated.py uses pickle.load() to read a version-check cache file stored at a predictable, world-accessible path (~/.cache/glances/glances-version.db or $XDG_CACHE_HOME/glances/glances-version.db). No integrity check, signature verification, or format validation is performed before deserialization. An attacker with write access to that path — through any of several realistic local or container-level scenarios — can plant a malicious pickle file and achieve arbitrary code execution as the OS user running Glances the next time it starts with version checking enabled (the default). This vulnerability is fixed in 4.5.5.

(GitHub Advisory)

Miggo Vulnerability Database

→

CVE-2026-46607

CVE-2026-46607:

7.8

CVSS Score

3.1

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

SSVC / BOD 26-04 ↗

Exploitation pocAutomatable NoTech Impact Total

Select your environment

→SSVCScheduled60 days

Runtime reachability resolves your actual outcome.Book a demo

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
glances	pip	< 4.5.5	4.5.5

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability exists in the glances/outdated.py module, which handles checking for new versions of the Glances software. The root cause is the use of Python's pickle module to serialize and deserialize cache data to a file located in a predictable, and often user-writable, directory (~/.cache/glances/).

The function Outdated._load_cache is the primary vulnerable function. It reads the cache file and uses pickle.load() to deserialize its contents. The pickle module is known to be unsafe when used with untrusted data, as a specially crafted pickle object can execute arbitrary code during deserialization. An attacker with write access to the cache file's location could replace the legitimate cache file with a malicious one. The next time Glances is run, the _load_cache function would deserialize the malicious file, resulting in arbitrary code execution with the permissions of the Glances process, which could be root.

The patch addresses this vulnerability by completely removing the usage of pickle. It modifies both Outdated._load_cache and Outdated._save_cache to use the json module instead. JSON is a safe data interchange format and does not have the code execution capabilities of pickle, thus eliminating the remote code execution risk.

Vulnerable functions

Outdated._load_cache

glances/outdated.py

The function `_load_cache` in the `Outdated` class insecurely deserializes data from a cache file using `pickle.load()`. The cache file is stored in a predictable, user-writable location (`~/.cache/glances/glances-version.db`). An attacker with local access can replace this file with a malicious pickle payload. When Glances starts and calls this function, the payload is executed, leading to arbitrary code execution with the privileges of the user running Glances.

Outdated._save_cache

glances/outdated.py

This function was responsible for serializing and saving the version check data using `pickle.dump()`. While not directly processing malicious input, it created the pickle file that an attacker could overwrite. The fix replaced this with `json.dump()` to prevent the creation of insecure pickle files in the first place, mitigating the vulnerability.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.