Vulnerability in N/a

CVE-2026-29872

A cross-session information disclosure vulnerability exists in the awesome-llm-apps project in commit e46690f99c3f08be80a9877fab52acacf7ab8251 (2026-01-19). The affected Streamlit-based GitHub MCP Agent stores user-supplied API tokens in p…

EPSS: 0.001 (26.9th percentile) — read the EPSS interpretation.

Affected products

  • N/a — versions n/a

References