Glances, an open-source cross-platform system monitoring tool, has an SSRF vulnerability (CWE-918) in its IP plugin prior to version 4.5.4. The issue is due to the public_api configuration parameter being used directly in HTTP requests without validating the URL scheme or hostname/IP. This allows an attacker who can modify the configuration to force outbound HTTP requests to arbitrary endpoints, including internal network services or cloud metadata endpoints. Additionally, if public_username and public_password are set, these credentials are automatically included in the Authorization header, risking credential leakage. The vulnerability is fixed in version 4.5.4.

Exploitation can result in unauthorized internal network access, exposure of sensitive data from internal or cloud metadata services, and leakage of credentials configured in Glances. The vulnerability has a CVSS 4.0 score of 7.3 (high severity), indicating significant risk if an attacker can modify the configuration. There are no known exploits in the wild at this time.

Upgrade Glances to version 4.5.4 or later, where this SSRF vulnerability is patched. Until the upgrade, restrict access to the Glances configuration to trusted users only to prevent unauthorized modification of the public_api parameter. No other vendor advisory or patch links are provided, so check the official Glances release notes for confirmation and further guidance.