PT-2026-34755 · Flowise+1 · Flowise+1

Tenbbughunters · Published 2026-04-16 · Updated 2026-05-12 · CVE-2026-41274

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Flowise versions prior to 3.1.0

Description The GraphCypherQAChain node forwards user-provided input directly into the Cypher query execution pipeline without proper sanitization. This allows an attacker to inject arbitrary Cypher commands that are executed on the underlying Neo4j database, potentially leading to data exfiltration, modification, deletion, or schema discovery. The issue occurs within the run() function of the GraphCypherQAChain.ts file, where the query variable is passed to the chain without escaping. Exploitation requires access to the prediction endpoint '/api/v1/prediction/{flowId}'.

Recommendations Update to version 3.1.0. As a temporary workaround, restrict access to the '/api/v1/prediction/{flowId}' endpoint to authorized users only.

Exploit

Fix

Weakness Enumeration

CWE-943

Related Identifiers

CVE-2026-41274

GHSA-28G4-38Q8-3CWC

Affected Products

Flowise

Neo4J

References · 7

• 🔥 https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-28g4-38q8-3cwc · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-41274 · Security Note
• https://osv.dev/vulnerability/GHSA-28g4-38q8-3cwc · Vendor Advisory
• https://github.com/FlowiseAI/Flowise · Note
• https://twitter.com/lyrie_ai/status/2054284680334053630 · Twitter Post
• https://twitter.com/lyrie_ai/status/2054284677003849752 · Twitter Post
• https://twitter.com/lyrie_ai/status/2054284678308192556 · Twitter Post