CVE-2026-114510

Flexible GraphRAG FalkorDB adapter permits injected Cypher clauses

stevereiner · Flexible GraphRAG LangChain FalkorDB adapter

First documented disclosure · Review checkpoint

Summary

Document-derived graph values can cross into executable database query syntax.

Severity and exploitation evidence

High · 7.1/10 · CVSS 3.1. Severity source.

Exploitation not established: The reviewed sources establish a vulnerability or controlled demonstration, not malicious exploitation against a victim. Exact-ID lookup found no entry in CISA KEV catalog 2026.10.27; absence does not prove no exploitation.

Exploitation evidence source

Technical severity is not a measure of observed attacks or of risk to your deployment. Attempts, demonstrations, and successful compromise retain the qualifications in the source.

How the weakness works

The adapter doubles escape characters after quote escaping and interpolates values and dynamic identifiers into Cypher.

Conditions required

GRAPH_BACKEND=langchain with GRAPH_DB=falkordb, and attacker-influenced document content reaches extracted graph values. The LlamaIndex store is unaffected.

Potential impact

Potential graph modification or deletion; disclosure depends on whether caller-visible results return graph data.

Affected versions and configurations

Flexible GraphRAG >=0.6.0, <0.8.2.

Fix and mitigation status

0.8.2.

Practical next steps

Upgrade, use parameterized queries and least-privilege graph credentials, and treat extracted entities as untrusted data.

Operating lesson

LLM extraction does not make document content safe for database syntax.

Evidence and limits

Advisory and release October 3 precede the October 22 CVE. The reporter reconstructed query strings without the full package; the maintainer subsequently confirmed an adjusted payload against a live FalkorDB and deleted every node in the test graph. This controlled test does not establish malicious exploitation against a victim. CNA CVSS 3.1 is 7.1, distinct from the report’s preliminary approximately-9 estimate.

Sources