CVE-2026-114510: Flexible GraphRAG Cypher injection in FalkorDB adapter via ingested documents

Summary

Flexible GraphRAG versions 0.6.0 through 0.8.2 contain a Cypher injection flaw (CVE-2026-114510) in the _escape() helper of flexible-graphrag/langchain/graph/pg_store_adapters/falkordb_adapter.py. Escaping quotes before backslashes lets an inserted escape be doubled and a quote end the string early. With GRAPH_BACKEND=langchain and GRAPH_DB=falkordb, attacker-influenced document content can make the extraction model emit malicious entity or relationship values that reach these queries, enabling modification or deletion of graph data and, where results are surfaced to users or an LLM, disclosure of graph data.

Mitigation

Fixed in version 0.8.2.

Topics

• Retrieval-augmented generation

Related items

• LowThird-party evaluators found vulnerabilities in OpenAI monitoring system during test pilotSimilar attack · CNBC Technology
• MediumChinese hackers spied on thousands of companies after breaching IT giant ConnectWiseSimilar attack · TechCrunch (Security)
• MediumRed-Teaming OpenAI's Internal Agent Monitoring SystemsSimilar attack · Redwood Research Blog
• MediumARTEX in the Wild: Storm-0940 Expands Targeting of IT and Software VendorsSimilar attack · Wiz Research Blog
• MediumChina-linked hackers used agentic AI in attack on 2,250 Microsoft 365 tenantsSimilar attack · CSO Online