Glances, a cross‑platform monitoring utility, deserializes a version‑check cache using Python's pickle without validation, off‑by‑one: the cache file is world‑accessible. An attacker who can write to the cache directory can place a crafted pickle that executes arbitrary code whenever Glances starts. The flaw is CWE‑502 and provides full code execution as the user that runs the utility.

The flaw exists in all releases of Glances by nicolargo older than 4.5.5. It affects the standard installation paths ~/.cache/glances/glances-version.db or $XDG_CACHE_HOME/glances/glances-version.db, meaning any system installing this open‑source monitoring tool without restricting write access to these directories – common in local user setups or container environments – is vulnerable.

The vulnerability carries a CVSS score of 7.8, indicating high severity. EPSS data is not available and the issue is not listed in the CISA KEV catalog, yet the local nature and lack of protection make exploitation straightforward for anyone with write permission to the cache path. An attacker could gain full control of the OS user running Glances, enabling privilege escalation or persistence.