CVE-2026-29023 KeygraphHQ CVE debrief

Who should care

Network administrators and security teams responsible for Keygraph Shannon installations should be aware of this vulnerability and take necessary actions to prevent exploitation. They should review configurations, assess exposure, and apply mitigations as needed to protect against potential unauthorized access and data disclosure.

Technical summary

The Keygraph Shannon vulnerability (CVE-2026-29023) involves a hard-coded API key in the router configuration. When the router component is enabled and exposed, an attacker can authenticate using the publicly known static key, potentially leading to unauthorized API usage and data disclosure. The vulnerability has a CVSS score of 6.9 and is classified as MEDIUM severity. Affected systems may be exposed to network attacks, allowing attackers to proxy requests through the Shannon instance using the victim's configured upstream provider API credentials.

Defensive priority

Medium priority should be given to addressing this vulnerability, as it can be exploited by network attackers to gain unauthorized access to the Shannon instance.

Recommended defensive actions

• Inventory and verify Keygraph Shannon installations
• Check if the router component is enabled and exposed
• Apply the mitigation patch (commit 023cc95) or disable the router component
• Monitor for suspicious activity and implement compensating controls
• Review and update API key configurations
• Verify configurations and assess exposure
• Implement additional security measures to detect and prevent exploitation

Evidence notes

The CVE record was published on 2026-03-09T18:16:22.727Z and last modified on 2026-07-14T19:16:55.753Z. The NVD entry is currently Deferred. Evidence is limited to public CVE and NVD information. Defenders should verify Keygraph Shannon installations, review configurations, and apply mitigations as needed.

Official resources