CVE-2026-41274: Flowise GraphCypherQAChain node Cypher injection into Neo4j database

Summary

CVE-2026-41274 affects Flowise, a drag and drop user interface for building customized large language model flows, prior to 3.1.0. The GraphCypherQAChain node passes user-provided input directly into the Cypher query execution pipeline without proper sanitization, letting an attacker inject arbitrary Cypher commands that run against the underlying Neo4j database. The flaw enables data exfiltration, modification, or deletion, and GitHub rates it CRITICAL with CVSS 4.0 base score 9.3, while NIST has not yet provided an assessment.

Mitigation

Fixed in 3.1.0.

Affected packages in the Exposure Registry

Matched by package name and ecosystem. Each entry shows whether the package delegates to a language model and how many tracked packages depend on it.

• flowisenpmLLM dependency since 2024-03-12
• flowise-componentsnpmLLM dependency since 2023-04-10 · 1 tracked dependent

Related items

• HighCVE-2026-123818: LMDeploy is a toolkit for compressing, deploying, and serving large language models. From 0.12.3 until 0.15.0…Similar attack · NVD/CVE Database
• HighGHSA-vvr2-h2jp-838m: Code Graph RAG: MCP paginated read_file path traversal / arbitrary file readSimilar attack · GitHub Advisory Database
• MediumAttackers Crash Claude's 'Office Party' Flaw to Run Malicious Code on LinuxSimilar attack · Dark Reading
• MediumCVE-2026-124588: huggingface finetrainers code injection via Library argumentSimilar attack · NVD/CVE Database
• MediumTaiwan-Based Hacker Used BOSSAI AI Agents to Steal Taipei Emergency Dispatch RecordsSimilar attack · The Hacker News