# CVE-2026-41274: Flowise: Cypher Injection in GraphCypherQAChain

Source: https://junglewise.ai/threats/cve-2026-41274-flowise-cypher-injection-in-graphcypherqachain  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-04-23. Updated: 2026-09-25  
License: CC BY 4.0 with a link back

CVE-2026-41274 · Severity: critical · CVSS 9.8 · Published 2026-04-23

Flowise is a visual builder for AI agents that integrates with Neo4j graph databases. The GraphCypherQAChain component fails to sanitize user input before passing it to Neo4j for query execution, allowing attackers to inject arbitrary Cypher commands. An authenticated user with access to a vulnerable chatflow can read, modify, or delete database records, including sensitive data stored in the graph.

Technologies: [FlowiseAI Flowise](https://junglewise.ai/threats/technologies/flowiseai-flowise), [flowise (npm)](https://junglewise.ai/threats/technologies/flowise), [flowise-components (npm)](https://junglewise.ai/threats/technologies/flowise-components). Vendors: [FlowiseAI](https://junglewise.ai/threats/vendors/flowiseai), [npm](https://junglewise.ai/threats/vendors/npm).

## Quick answers

**Is CVE-2026-41274 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-41274 being exploited in the wild.

**How severe is CVE-2026-41274?** Critical severity, with a CVSS score of 9.8, published 23 April 2026.

**Which products and versions are affected?** flowise (npm) <= 3.0.13, SEMVER:introduced=0,fixed=3.1.0; flowise-components (npm) <= 3.0.13, SEMVER:introduced=0,fixed=3.1.0.

**Is there a fix for CVE-2026-41274?** Yes. flowise (npm): upgrade to 3.1.0 or later; flowise-components (npm): upgrade to 3.1.0 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-41274 attacked?** It is attacked over the network, in a software library.

**Am I affected by CVE-2026-41274?** Check whether you run FlowiseAI Flowise, flowise (npm) or flowise-components (npm) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- flowise (npm): upgrade to 3.1.0 or later

  ```sh
  npm install flowise@3.1.0
  ```

- flowise-components (npm): upgrade to 3.1.0 or later

  ```sh
  npm install flowise-components@3.1.0
  ```


## Technical details

The vulnerability is a Cypher injection flaw (CWE-943) in the GraphCypherQAChain node's run method (lines 193–219 of GraphCypherQAChain.ts). User-supplied input is passed directly to the chain's invoke method without any sanitization or parameterization, allowing an attacker to craft arbitrary Cypher queries. Exploitation requires network access to the Flowise API endpoint /api/v1/prediction/{flowId}, a valid chatflow ID, and (optionally) valid API credentials if authentication is enforced. An attacker can exfiltrate sensitive data, modify or delete nodes and relationships, enumerate database schema, and destroy the entire database using DETACH DELETE commands. The vulnerability affects all versions up to and including 3.0.13; version 3.1.0 and later include a fix.

## Affected products

- FlowiseAI flowise <= 3.0.13
- FlowiseAI flowise-components <= 3.0.13

## Identifiers

- CVE-2026-41274
- GHSA-28g4-38q8-3cwc

## Timeline

- 2026-04-15: disclosed: Advisory published on GitHub
- 2026-04-16: advisory: OSV/GHSA entry published
- 2026-04-16: patched: Fix released in version 3.1.0

## References

- [https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-28g4-38q8-3cwc](https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-28g4-38q8-3cwc)
- [https://github.com/FlowiseAI/Flowise](https://github.com/FlowiseAI/Flowise)

## Related threats

- [Flowise sandbox escape in custom function endpoint](https://junglewise.ai/threats/cve-2026-119978-flowise-through-3-1-4-contains-a-sandbox-escape-vulnerability)
- [Duplicate Advisory: INVITED users auto-promoted via SSO email match (invite-token bypass)](https://junglewise.ai/threats/duplicate-advisory-invited-users-auto-promoted-via-sso-email-match-d290aa10)
- [Flowise credential lookup authorization bypass](https://junglewise.ai/threats/cve-2026-100609-flowise-npm-packages-flowise-and-flowise-components-through-3-1)
- [Flowise authentication bypass via email-only SSO matching](https://junglewise.ai/threats/cve-2026-100607-flowise-through-3-1-4-resolves-sso-and-local-password-users)
- [Flowise authentication bypass in SSO login path](https://junglewise.ai/threats/cve-2026-100606-flowise-through-3-1-4-enterprise-platform-mode-with-sso-enabled)