Signal is active with 4 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, the GraphCypherQAChain node forwards user-provided input directly into the Cypher query execution pipeline without proper sanitization. An attacker can inject arbitrary Cypher commands that are executed on the underlying Neo4j database, enabling data exfiltration, modification, or deletion. This vulnerability is fixed in 3.1.0.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
References CVE: CVE-2026-41274 CVSS: 9.8 (3.1) — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Severity: CRITICAL Status: Critical advisory
Post summary
The text lists CVE-2026-41274 with a critical severity rating and CVSS score but provides no additional context, tooling, or remedial actions.
CVE: CVE-2026-41274 CVSS: 9.8 (3.1) — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Severity: CRITICAL Status: Critical advisory Flowise is a drag & drop user interface to build a customized large language model flow.
Post summary
The text announces CVE-2026-41274, noting its critical severity, CVSS score, and advisory status for Flowise.
CRITICAL: CVE-2026-41274 (CVSS 9.8) — flowiseai flowise. CVE: CVE-2026-41274 CVSS: 9.8 (3.1) — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Severity: CRITICAL Status: Critical advisory
Post summary
The text announces CVE-2026-41274 with a CVSS score of 9.8 and critical severity, providing primarily disclosure information without details on exploitation, PoC, or mitigations.
https://lyrie.ai/research/research/cve-2026-41274-flowiseai-flowise #lyrie #cybersecurity #CVE #threatintel #zerodayattack
Post summary
The post references a research link for CVE‑2026‑41274 with no additional details about the vulnerability, exploit, patches, or activity.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | flowiseai | flowise | - | - | - |