CVE-2026-29872

CVE-2026-29872 describes a high-severity cross-session information disclosure vulnerability in the `awesome-llm-apps` project's Streamlit-based GitHub MCP Agent. This flaw allows user-supplied API tokens, such as GitHub Personal Access Tokens or LLM API keys, to be exposed to other unauthenticated users due to improper session isolation when storing credentials in process-wide environment variables. With a CVSS score of 8.2 High, this vulnerability can be exploited remotely without authentication and with low attack complexity. Successful exploitation could lead to the retrieval of sensitive credentials, enabling unauthorized access to private resources and potential financial abuse. There is currently no evidence of active exploitation or public exploit code, though the vulnerability has garnered minor community discussion.