Which versions of Flowise are affected by EUVD-2026-25313?

Flowise versions prior to 3.1.0 contain a critical unauthenticated Cypher injection vulnerability (CVSS 9.3) that allows remote attackers to execute arbitrary commands against connected Neo4j…. A patch is available.

How to fix or mitigate EUVD-2026-25313?

Within 24 hours: Identify all Flowise deployments and connected Neo4j instances; document current versions of flowise and flowise-components packages. Within 7 days: Apply vendor patch to upgrade flowise and flowise-components to version 3.1.0 or later across all environments. Within 30 days: Conduct security audit of Neo4j access logs for suspicious Cypher query patterns; review and restrict database user permissions to principle of least privilege; validate patch deployment completeness.

Flowise EUVD-2026-25313

Q: What is the CVSS score of EUVD-2026-25313?

EUVD-2026-25313 has a CVSS 4.0 base score of 9.3 (Critical). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.1%.

| CVE-2026-41274 CRITICAL

Improper Neutralization of Special Elements in Data Query Logic (CWE-943)

2026-04-23 GitHub_M

GHSA-28g4-38q8-3cwc

Code Injection Nosql Injection Flowise Flowise Components

9.3

CVSS 4.0 · GitHub Advisory

Severity by source

GitHub Advisory PRIMARY

9.3 CRITICAL

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from GitHub Advisory · only source for this CVE.

CVSS VectorGitHub Advisory

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Lifecycle Timeline

Patch released

May 04, 2026 - 18:33 nvd

Patch available

Re-analysis Queued

Apr 24, 2026 - 14:52 vuln.today

cvss_changed

Analysis Generated

Apr 24, 2026 - 00:45 vuln.today

Patch available

Apr 23, 2026 - 23:16 EUVD

CVSS changed

Apr 23, 2026 - 22:28 NVD

9.3 (CRITICAL)

EUVD ID Assigned

Apr 23, 2026 - 21:45 euvd

EUVD-2026-25313

Analysis Generated

Apr 23, 2026 - 21:45 vuln.today

CVE Published

Apr 23, 2026 - 21:12 nvd

CRITICAL 9.3

DescriptionGitHub Advisory

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, the GraphCypherQAChain node forwards user-provided input directly into the Cypher query execution pipeline without proper sanitization. An attacker can inject arbitrary Cypher commands that are executed on the underlying Neo4j database, enabling data exfiltration, modification, or deletion. This vulnerability is fixed in 3.1.0.

AnalysisAI

Cypher injection in Flowise GraphCypherQAChain node allows remote unauthenticated attackers to execute arbitrary database commands against connected Neo4j instances. Attackers can exfiltrate, modify, or delete data in the graph database by injecting malicious Cypher queries through user-controlled input fields that bypass sanitization (CWE-943: Improper Neutralization of Special Elements in Data Query Logic). The vulnerability affects both Flowise core and flowise-components packages prior to version 3.1.0. CVSS 9.3 critical severity reflects network-accessible attack vector requiring no authentication or user interaction. EPSS data unavailable; no CISA KEV listing indicates exploitation not yet confirmed in the wild, though GitHub security advisory confirms vendor awareness and patch availability.

Technical ContextAI

Flowise is an open-source low-code platform for building LLM (Large Language Model) orchestration flows through a visual drag-and-drop interface. The GraphCypherQAChain node integrates with Neo4j graph databases to enable natural language querying over graph data. This node constructs Cypher queries (Neo4j's graph query language, similar to SQL for relational databases) dynamically based on user input. The vulnerability stems from CWE-943 (Improper Neutralization of Special Elements in Data Query Logic), the same class as SQL injection but applied to Cypher/NoSQL contexts. The affected CPE strings identify two distinct but related packages: cpe:2.3:a:flowiseai:flowise (main application) and cpe:2.3:a:flowiseai:flowise-components (component library containing the vulnerable GraphCypherQAChain node). The CVSS 4.0 vector AV:N/AC:L/PR:N/UI:N indicates network-accessible exploitation with low complexity, no required privileges, and no user interaction, making this a classic injection vulnerability in an API or workflow processing pipeline.

RemediationAI

Upgrade to Flowise version 3.1.0 and flowise-components version 3.1.0 immediately, as vendor-released patches address the Cypher injection vulnerability through proper input sanitization in the GraphCypherQAChain node. Consult the official GitHub security advisory at https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-28g4-38q8-3cwc for specific upgrade instructions and any additional mitigation guidance. If immediate patching is not feasible, disable or remove all GraphCypherQAChain nodes from active Flowise workflows and restrict network access to Flowise instances using firewall rules limiting connections to trusted IP addresses only. As a compensating control, implement Neo4j database-level access restrictions by creating read-only database users for Flowise connections and revoking WRITE, DELETE, and administrative privileges, though this reduces functionality and does not prevent data exfiltration. Network segmentation isolating Neo4j instances from internet-facing systems limits lateral movement post-exploitation but does not prevent initial compromise of the Flowise application layer. All workarounds are inferior to patching; prioritize upgrade to 3.1.0 for complete remediation.