EUVD-2026-292953

fkie_cve-2026-41274

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, the GraphCypherQAChain node forwards user-provided input directly into the Cypher query execution pipeline without proper sanitization. An attacker can inject arbitrary Cypher commands that are executed on the underlying Neo4j database, enabling data exfiltration, modification, or deletion. This vulnerability is fixed in 3.1.0.

GHSA-28g4-38q8-3cwc — Flowise: Cypher Injection in GraphCypherQAChain

Affected: npm: flowise, npm: flowise-components

## Summary

The GraphCypherQAChain node forwards user-provided input directly into the Cypher query execution pipeline without proper sanitization. An attacker can inject arbitrary Cypher commands that are executed on the underlying Neo4j database, enabling data exfiltration, modification, or deletion.

## Vulnerability Details

| Field | Value | |-------|-------| | Affected File | `packages/components/nodes/chains/GraphCypherQAChain/GraphCypherQAChain.ts` | | Affected Lines | 193-219 (run method) |

## Prerequisites

To exploit this vulnerability, the following conditions must be met:

1. **Neo4j Database**: A Neo4j instance must be connected to the Flowise server 2. **Vulnerable Chatflow Configuration**: - A chatflow containing the **Graph Cypher QA Chain** node - Connected to a **Chat Model** (e.g., ChatOpenAI) - Connected to a **Neo4j Graph** node with valid credentials 3. **API Access**: Access to the chatflow's prediction endpoint (`/api/v1/prediction/{flowId}`)

## Root Cause

In `GraphCypherQAChain.ts`, the `run` method passes user input directly to the chain without sanitization:

```typescript async run(nodeData: INodeData, input: string, options: ICommonObject): Promise<string | object> { const chain = nodeData.instance as GraphCypherQAChain // ... const obj = { query:…

WID-SEC-W-2026-1145 — Flowise: Mehrere Schwachstellen

Ein Angreifer kann mehrere Schwachstellen in Flowise ausnutzen, um beliebigen Programmcode auszuführen, um Sicherheitsvorkehrungen zu umgehen, um Informationen offenzulegen, und um Dateien zu manipulieren.

Most recent entries from all

EUVD-2026-292953

fkie_cve-2026-41274

GHSA-28g4-38q8-3cwc — Flowise: Cypher Injection in GraphCypherQAChain

WID-SEC-W-2026-1145 — Flowise: Mehrere Schwachstellen