{
 "id": "AIR-2026-0574",
 "slug": "cve-2026-41274-flowise-cypher-injection-vulnerability-in-gra",
 "title": "CVE-2026-41274: Flowise Cypher Injection Vulnerability in GraphCypherQAChain",
 "summary": "An unauthenticated Cypher injection vulnerability exists in the Flowise GraphCypherQAChain node due to unsanitized user input forwarded to the database. An attacker can execute arbitrary Cypher queries to exfiltrate or modify data on the underlying Neo4j database.",
 "type": "attack_on_ai",
 "categories": [
  "infra_vuln"
 ],
 "severity": 2,
 "targets": [
  "framework_or_tooling"
 ],
 "products": [
  "Flowise"
 ],
 "incident_date": "2026-04-16",
 "incident_date_precision": "day",
 "first_reported": "2026-04-16",
 "sources": [
  {
   "url": "https://github.com/advisories/GHSA-28g4-38q8-3cwc",
   "publisher": "GitHub Advisory Database",
   "title": "CVE-2026-41274: Flowise: Cypher Injection in GraphCypherQAChain",
   "published_at": "2026-04-16"
  },
  {
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-41274",
   "publisher": "NVD",
   "title": "CVE-2026-41274: Flowise is a drag & drop user interface to build a customized large language model flow.",
   "published_at": "2026-04-23"
  }
 ],
 "source_count": 2,
 "confidence": 0.95,
 "status": "published",
 "origin": "seed_ghsa",
 "tags": [
  "CVE-2026-41274",
  "cypher-injection",
  "flowise"
 ],
 "created_at": "2026-10-18T07:00:14.101Z",
 "updated_at": "2026-10-18T10:04:21.885Z"
}