PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-29023 KeygraphHQ CVE debrief

CVE-2026-29023 is a vulnerability in Keygraph Shannon that contains a hard-coded API key in its router configuration. When the router component is enabled and exposed, it allows network attackers to authenticate using the publicly known static key. This vulnerability has been mitigated with the introduction of commit 023cc95. Network administrators and security teams should review Keygraph Shannon installations, assess exposure, and apply necessary mitigations to prevent exploitation.

Vendor
KeygraphHQ
Product
Shannon
CVSS
MEDIUM 6.9
CISA KEV
Not listed in stored evidence
Original CVE published
2026-03-09
Original CVE updated
2026-07-14
Advisory published
2026-03-09
Advisory updated
2026-07-14

Who should care

Network administrators and security teams responsible for Keygraph Shannon installations should be aware of this vulnerability and take necessary actions to prevent exploitation. They should review configurations, assess exposure, and apply mitigations as needed to protect against potential unauthorized access and data disclosure.

Technical summary

The Keygraph Shannon vulnerability (CVE-2026-29023) involves a hard-coded API key in the router configuration. When the router component is enabled and exposed, an attacker can authenticate using the publicly known static key, potentially leading to unauthorized API usage and data disclosure. The vulnerability has a CVSS score of 6.9 and is classified as MEDIUM severity. Affected systems may be exposed to network attacks, allowing attackers to proxy requests through the Shannon instance using the victim's configured upstream provider API credentials.

Defensive priority

Medium priority should be given to addressing this vulnerability, as it can be exploited by network attackers to gain unauthorized access to the Shannon instance.

Recommended defensive actions

  • Inventory and verify Keygraph Shannon installations
  • Check if the router component is enabled and exposed
  • Apply the mitigation patch (commit 023cc95) or disable the router component
  • Monitor for suspicious activity and implement compensating controls
  • Review and update API key configurations
  • Verify configurations and assess exposure
  • Implement additional security measures to detect and prevent exploitation

Evidence notes

The CVE record was published on 2026-03-09T18:16:22.727Z and last modified on 2026-07-14T19:16:55.753Z. The NVD entry is currently Deferred. Evidence is limited to public CVE and NVD information. Defenders should verify Keygraph Shannon installations, review configurations, and apply mitigations as needed.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-29023 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-29023

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-29023 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-29023

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.