Threats tagged 'brew-glances-cve-2026-35588'

CVE-2026-35588 is a medium severity SQL injection vulnerability in the open-source monitoring tool Glances prior to version 4.5.4. The issue exists in the Cassandra export module where configuration values for keyspace, table, and replication_factor are directly interpolated into CQL statements without validation. This allows a user with write access to the glances.conf file to redirect monitoring data to an attacker-controlled Cassandra keyspace. Version 4.5.4 includes a fix for this vulnerability.