CVE-2026-29871: Improper Limitation of a Pathname to a Restricted Directory

A path traversal vulnerability exists in the awesome-llm-apps project in commit e46690f99c3f08be80a9877fab52acacf7ab8251 2026-01-19 in the Beifong AI News and Podcast Agent backend in FastAPI backend, stream-audio endpoint, in file routers/podcastrouter.py, in function streamaudio. The stream-aud...

CVE-2026-29871

A path traversal vulnerability exists in the awesome-llm-apps project (specifically within the Beifong AI News and Podcast Agent backend). The flaw is located in the FastAPI backend's stream_audio function in the file routers/podcast_router.py. The vulnerability stems from the stream-audio endpoi...