Information disclosure in Theunwindai Awesome Llm Apps
CVE-2026-29872
A cross-session information disclosure vulnerability exists in the awesome-llm-apps project in commit e46690f99c3f08be80a9877fab52acacf7ab8251 (2026-01-19). The affected Streamlit-based GitHub MCP Agent stores user-supplied API tokens in process-wide environment variables using os.environ without proper session isolation. Because Streamlit serves multiple concurrent users from a single Python process, credentials provided by one user remain accessible to subsequent unauthenticated users. An attacker can exploit this issue to retrieve sensitive information such as GitHub Personal Access Tokens or LLM API keys, potentially leading to unauthorized access to private resources and financial abuse.
Vulnerability class: Information Disclosure
Published · last modified .
CVSS v3 metric
CVSS v3 base score 8.2 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N.
EPSS exploit prediction
EPSS: 0.004 (28.1th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 28th percentile — 28.1% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.003 · newest: 0.004 · change: +0.001
Affected products
- Theunwindai Awesome Llm Apps — versions 2026-01-19
Weakness classification (CWE)
References
- github.com/lilmingwa13/security-research/blob/main/CVE-2026-29872.md (Exploit, Third Party Advisory, Mitigation)
Frequently asked questions
- What is CVE-2026-29872?
- CVE-2026-29872 is a high-severity vulnerability in Theunwindai Awesome Llm Apps, classified under Information Disclosure. CVSS score: 8.2/10. Published 2026-03-30.
- How severe is CVE-2026-29872?
- High severity. CVSS v3 base score is 8.2 out of 10.