CVE-2026-29872

HIGH EPSS 16.6%

Published Mar 30, 20263mo ago · Modified Jun 17, 20261w ago

8.2 CVSS 3.1

High

Published Mar 30, 2026 3mo ago

Last Modified Jun 17, 2026 1w ago

Description

A cross-session information disclosure vulnerability exists in the awesome-llm-apps project in commit e46690f99c3f08be80a9877fab52acacf7ab8251 (2026-01-19). The affected Streamlit-based GitHub MCP Agent stores user-supplied API tokens in process-wide environment variables using os.environ without proper session isolation. Because Streamlit serves multiple concurrent users from a single Python process, credentials provided by one user remain accessible to subsequent unauthenticated users. An attacker can exploit this issue to retrieve sensitive information such as GitHub Personal Access Tokens or LLM API keys, potentially leading to unauthorized access to private resources and financial abuse.

CVSS Details

Base Score

8.2

Exploitability

3.9

Impact

4.2

Vector string

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

Attack Vector Network

Attack Complexity Low

Privileges Required None

User Interaction None

Scope Unchanged

Confidentiality High

Integrity Low

Availability None

Threat Intelligence

EPSS Exploit Probability

16.6% percentile

Exploit & Patch Status

Public Exploit Known

No Patch Available

Weaknesses 3

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor Information Exposure

CWE-284

CWE-522

Affected Products 1

Vendor	Product	Version	Range
theunwindai	awesome_llm_apps	2026-01-19	any

References 1

github.com https://github.com/lilmingwa13/security-research/blob/main/CVE-2026-29872.md

ExploitMitigationThird Party Advisory

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.