Is CVE-2026-41274 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-41274 being exploited in the wild.

How severe is CVE-2026-41274?

Critical severity, with a CVSS score of 9.8, published 23 April 2026.

Which products and versions are affected?

flowise (npm) <= 3.0.13, SEMVER:introduced=0,fixed=3.1.0; flowise-components (npm) <= 3.0.13, SEMVER:introduced=0,fixed=3.1.0.

Is there a fix for CVE-2026-41274?

Yes. flowise (npm): upgrade to 3.1.0 or later; flowise-components (npm): upgrade to 3.1.0 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2026-41274 attacked?

It is attacked over the network, in a software library.

Am I affected by CVE-2026-41274?

Check whether you run FlowiseAI Flowise, flowise (npm) or flowise-components (npm) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-41274: Flowise: Cypher Injection in GraphCypherQAChain

Q: Which products and versions are affected?

flowise (npm) <= 3.0.13, SEMVER:introduced=0,fixed=3.1.0; flowise-components (npm) <= 3.0.13, SEMVER:introduced=0,fixed=3.1.0.

Q: Is there a fix for CVE-2026-41274?

Yes. flowise (npm): upgrade to 3.1.0 or later; flowise-components (npm): upgrade to 3.1.0 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

Q: How is CVE-2026-41274 attacked?

It is attacked over the network, in a software library.

Q: Am I affected by CVE-2026-41274?

Check whether you run FlowiseAI Flowise, flowise (npm) or flowise-components (npm) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-41274 · Severity: critical · CVSS 9.8 · Published 2026-04-23

Flowise is a visual builder for AI agents that integrates with Neo4j graph databases. The GraphCypherQAChain component fails to sanitize user input before passing it to Neo4j for query execution, allowing attackers to inject arbitrary Cypher commands. An authenticated user with access to a vulnerable chatflow can read, modify, or delete database records, including sensitive data stored in the graph.

Technologies: FlowiseAI Flowise, flowise (npm), flowise-components (npm). Vendors: FlowiseAI, npm.

Quick answers

Is CVE-2026-41274 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-41274 being exploited in the wild.
How severe is CVE-2026-41274?: Critical severity, with a CVSS score of 9.8, published 23 April 2026.
Which products and versions are affected?: flowise (npm) <= 3.0.13, SEMVER:introduced=0,fixed=3.1.0; flowise-components (npm) <= 3.0.13, SEMVER:introduced=0,fixed=3.1.0.
Is there a fix for CVE-2026-41274?: Yes. flowise (npm): upgrade to 3.1.0 or later; flowise-components (npm): upgrade to 3.1.0 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-41274 attacked?: It is attacked over the network, in a software library.
Am I affected by CVE-2026-41274?: Check whether you run FlowiseAI Flowise, flowise (npm) or flowise-components (npm) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

flowise (npm): upgrade to 3.1.0 or later
```
npm install flowise@3.1.0
```
flowise-components (npm): upgrade to 3.1.0 or later
```
npm install flowise-components@3.1.0
```

Technical details

The vulnerability is a Cypher injection flaw (CWE-943) in the GraphCypherQAChain node's run method (lines 193–219 of GraphCypherQAChain.ts). User-supplied input is passed directly to the chain's invoke method without any sanitization or parameterization, allowing an attacker to craft arbitrary Cypher queries. Exploitation requires network access to the Flowise API endpoint /api/v1/prediction/{flowId}, a valid chatflow ID, and (optionally) valid API credentials if authentication is enforced. An attacker can exfiltrate sensitive data, modify or delete nodes and relationships, enumerate database schema, and destroy the entire database using DETACH DELETE commands. The vulnerability affects all versions up to and including 3.0.13; version 3.1.0 and later include a fix.

Affected products

FlowiseAI flowise <= 3.0.13
FlowiseAI flowise-components <= 3.0.13

Identifiers

CVE-2026-41274
GHSA-28g4-38q8-3cwc

Timeline

2026-04-15: disclosed: Advisory published on GitHub
2026-04-16: advisory: OSV/GHSA entry published
2026-04-16: patched: Fix released in version 3.1.0

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.