Skip to main content

Flowise CVE-2026-41274

| EUVDEUVD-2026-25313 CRITICAL
Improper Neutralization of Special Elements in Data Query Logic (CWE-943)
2026-04-23 GitHub_M GHSA-28g4-38q8-3cwc
Code Injection Nosql Injection Flowise Flowise Components
9.3
CVSS 4.0 · GitHub Advisory
Share

Severity by source

GitHub Advisory PRIMARY
9.3 CRITICAL
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from GitHub Advisory · only source for this CVE.

CVSS VectorGitHub Advisory

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
X

Lifecycle Timeline

8
Patch released
May 04, 2026 - 18:33 nvd
Patch available
Re-analysis Queued
Apr 24, 2026 - 14:52 vuln.today
cvss_changed
Analysis Generated
Apr 24, 2026 - 00:45 vuln.today
Patch available
Apr 23, 2026 - 23:16 EUVD
CVSS changed
Apr 23, 2026 - 22:28 NVD
9.3 (CRITICAL)
EUVD ID Assigned
Apr 23, 2026 - 21:45 euvd
EUVD-2026-25313
Analysis Generated
Apr 23, 2026 - 21:45 vuln.today
CVE Published
Apr 23, 2026 - 21:12 nvd
CRITICAL 9.3

DescriptionGitHub Advisory

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, the GraphCypherQAChain node forwards user-provided input directly into the Cypher query execution pipeline without proper sanitization. An attacker can inject arbitrary Cypher commands that are executed on the underlying Neo4j database, enabling data exfiltration, modification, or deletion. This vulnerability is fixed in 3.1.0.

AnalysisAI

Cypher injection in Flowise GraphCypherQAChain node allows remote unauthenticated attackers to execute arbitrary database commands against connected Neo4j instances. Attackers can exfiltrate, modify, or delete data in the graph database by injecting malicious Cypher queries through user-controlled input fields that bypass sanitization (CWE-943: Improper Neutralization of Special Elements in Data Query Logic). …

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts
Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access
Identify exposed Flowise instance
Delivery
Send crafted request to GraphCypherQAChain endpoint
Exploit
Inject malicious Cypher commands
Execution
Execute arbitrary database operations
Impact
Exfiltrate or manipulate Neo4j graph data
Sign in to reveal

Vulnerability AssessmentAI

Exploitation Exploitation requires the target Flowise deployment to have active workflows utilizing the GraphCypherQAChain node component with configured Neo4j database connectivity. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment Real-world risk is critically high for organizations using Flowise's GraphCypherQAChain node with Neo4j databases. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario An attacker identifies a publicly accessible Flowise instance with GraphCypherQAChain workflows by scanning for exposed ports or discovering the application through search engine reconnaissance. Without authentication, they submit a crafted API request to a workflow endpoint containing malicious Cypher injection payload in user input fields, such as MATCH (n) DETACH DELETE n to delete all graph nodes or MATCH (n) RETURN n to exfiltrate entire database contents. …
Remediation Upgrade to Flowise version 3.1.0 and flowise-components version 3.1.0 immediately, as vendor-released patches address the Cypher injection vulnerability through proper input sanitization in the GraphCypherQAChain node. … Detailed patch versions, workarounds, and compensating controls in full report.
Sign in to read full assessment

Recommended ActionAI

Within 24 hours: Identify all Flowise deployments and connected Neo4j instances; document current versions of flowise and flowise-components packages. …

Sign in for detailed remediation steps and compensating controls.

Threat intelligence, references, and detailed analysis are available after sign-in.

More in Flowise

View all
CVE-2025-59528 CRITICAL POC
10.0 Sep 22

Flowise version 3.0.5 contains a remote code execution vulnerability in the CustomMCP node. The mcpServerConfig paramete
CVE-2025-8943 CRITICAL POC
9.8 Aug 14

Flowise versions before 3.0.1 allow unauthenticated access to the Custom MCPs feature, which is designed to execute OS c
CVE-2025-26319 CRITICAL POC
9.8 Mar 04

FlowiseAI Flowise version 2.2.6 contains an arbitrary file upload vulnerability in the /api/v1/attachments endpoint. Una
CVE-2025-58434 CRITICAL POC
9.8 Sep 12

Flowise is a drag & drop user interface to build a customized large language model flow. Rated critical severity (CVSS 9
CVE-2026-30821 CRITICAL POC
9.8 Mar 07

Unrestricted file upload in Flowise LLM workflow builder before 3.0.13 via /api/v1/attachments endpoint allows unauthent
CVE-2026-30824 CRITICAL POC
9.8 Mar 07

Missing authentication on NVD data endpoint in Flowise before 3.0.13 allows unauthenticated access to internal vulnerabi
CVE-2026-56274 HIGH POC
8.7 Jun 23

Remote code execution in Flowise before 3.1.2 allows any authenticated user (or API caller with chatflow view/update per
CVE-2026-30820 HIGH POC
8.8 Mar 07

Privilege escalation in Flowise versions prior to 3.0.13 allows authenticated users to bypass API authorization by spoof
CVE-2026-30823 HIGH POC
8.8 Mar 07

Flowise versions up to 3.0.13 is affected by authorization bypass through user-controlled key (CVSS 8.8).
CVE-2026-30822 HIGH POC
7.7 Mar 07

Flowise versions up to 3.0.13 is affected by improperly controlled modification of dynamically-determined object attribu
CVE-2025-29189 HIGH POC
7.6 Apr 09

Flowise <= 2.2.3 is vulnerable to SQL Injection. Rated high severity (CVSS 7.6), this vulnerability is remotely exploita
CVE-2025-59527 HIGH POC
7.5 Sep 22

Flowise is a drag & drop user interface to build a customized large language model flow. Rated high severity (CVSS 7.5),

Same weakness CWE-943 – Improper Neutralization of Special Elements in Data Query Logic

View all
CVE-2026-32248 CRITICAL POC
9.8
CVE-2026-32247 HIGH POC
8.1
CVE-2026-25591 MEDIUM POC
6.5
CVE-2026-40351 CRITICAL
9.8
CVE-2026-45689 CRITICAL
9.1
CVE-2026-45688 CRITICAL
9.1
CVE-2026-41328 CRITICAL
9.1
CVE-2026-41327 CRITICAL
9.1

Same technique Code Injection

View all
CVE-2012-0158 HIGH POC
8.8
CVE-2025-24893 CRITICAL POC
9.8
CVE-2025-47812 CRITICAL POC
10.0
CVE-2013-3906 HIGH POC
7.8
CVE-2017-8759 HIGH POC
7.8
CVE-2025-49704 HIGH POC
8.8
CVE-2026-1281 CRITICAL POC
9.8
CVE-2026-1340 CRITICAL POC
9.8

Share

CVE-2026-41274 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy