PT-2026-29084 · Unknown+1 · Awesome-Llm-Apps+2

Pham Minh · Publicado 2026-03-30 · Atualizado 2026-03-31 · CVE-2026-29872

Positive Technologies (AI Summary)

CVSS v3.1

8.2

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

Name of the Vulnerable Software and Affected Versions awesome-llm-apps versions prior to commit e46690f99c3f08be80a9877fab52acacf7ab8251

Description A cross-session information disclosure issue exists in the awesome-llm-apps project. The Streamlit-based GitHub MCP Agent stores user-supplied API tokens in process-wide environment variables using os.environ without proper session isolation. Because Streamlit serves multiple concurrent users from a single Python process, credentials provided by one user remain accessible to subsequent unauthenticated users. An attacker can exploit this to retrieve sensitive information such as GitHub Personal Access Tokens or LLM API keys, potentially leading to unauthorized access to private resources and financial abuse.

Recommendations Update to commit e46690f99c3f08be80a9877fab52acacf7ab8251 or a later version.

Exploit

Correção

Insufficiently Protected Credentials

Information Disclosure

Improper Access Control

Enumeração de Fraquezas

CWE-522

CWE-200

CWE-284

Identificadores relacionados

CVE-2026-29872

Produtos afetados

Github Mcp Agent

Streamlit

Awesome-Llm-Apps

Referências · 5

• 🔥 https://github.com/lilmingwa13/security-research/blob/main/CVE-2026-29872.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-29872 · Nota de Segurança
• https://twitter.com/TheHackerWire/status/2038697200143008129 · Publicação no Twitter
• https://twitter.com/CVEnew/status/2039004534425399643 · Publicação no Twitter
• https://twitter.com/infoflowcloud/status/2039007190472651225 · Publicação no Twitter