CVE-2026-29872

creationtimestamp| type| source ---|---|--- 2026-03-30 19:21:01+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3micf25tbea27...

CVE-2026-29872

A cross-session information disclosure vulnerability exists in the awesome-llm-apps project in commit e46690f99c3f08be80a9877fab52acacf7ab8251 2026-01-19. The affected Streamlit-based GitHub MCP Agent stores user-supplied API tokens in process-wide environment variables using os.environ without...