CVE-2023-29656: Darktrace Threat Visualizer

Medium severity, CVSS 6.1. EPSS: 0.3% chance of exploitation in the next 30 days.

An improper authorization vulnerability in Darktrace mobile app (Android) prior to version 6.0.15 allows disabled and low-privilege users to control "antigena" actions(block/unblock traffic) from the mobile application. This vulnerability could create a "shutdown", blocking all ingress or egress traffic in the entire infrastructure where darktrace agents are deployed.

Affected products

• Darktrace Threat Visualizer: from 6.0.0, before 6.0.15 (fixed in 6.0.15)

Published 2023-07-06. Last modified 2026-06-17.