Executive brief
Keygraph Shannon, an AI-powered code analysis tool, contains a publicly known, hard-coded password in its router configuration. This allows unauthorized individuals to connect to the software and use the owner's paid AI accounts (such as OpenAI or Anthropic) at the owner's expense. Additionally, attackers may be able to view sensitive data being sent to or from the AI services.
Technical details
Keygraph Shannon (prior to commit 023cc95) utilizes a hard-coded API key ('shannon-router-key') within its router configuration. When the router component is enabled and exposed on a network interface (defaulting to 0.0.0.0 in vulnerable versions), an unauthenticated attacker can use this static key to authenticate to the router port (default 3456). This allows the attacker to proxy arbitrary requests through the Shannon instance using the victim's configured upstream provider API tokens (e.g., OpenAI, Anthropic), leading to unauthorized API consumption and potential exposure of request/response data. The issue was mitigated by binding Docker ports to localhost and removing the hard-coded defaults.
Affected products
- KeygraphHQ Shannon before commit 023cc95
Timeline
- 2026-03-03: disclosed: Issue reported on GitHub by researcher Chocapikk
- 2026-03-07: patched: Mitigating commit 023cc95 merged into main branch
- 2026-03-09: advisory: CVE-2026-29023 published