Glances, a cross‑platform monitoring tool, contains a flaw in its action‑template sanitizer that allows pipe characters to survive the rendering of process command line values. When these values are passed to the mustache template engine, the embedded characters are not escaped, enabling arbitrary shell commands to be executed through the secure_popen call. This results in OS command injection, allowing an attacker to run commands with the privileges of the process that invokes the template.

The vulnerability affects the open‑source Glances tool from nicolargo for versions 4.5.2 through 4.5.5. The issue was addressed in the 4.5.6 release.

The CVSS score of 8.8 indicates high severity, and no EPSS data is available, but the flaw is not listed in CISA’s KEV catalog. Attackers would typically need access to configure or modify administrator‑supplied action templates to exploit the flaw. Once the malicious template is used, arbitrary commands can be executed on the host, compromising confidentiality, integrity, and availability of the affected system.