Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, the GraphCypherQAChain node forwards user-provided input directly into the Cypher query execution pipeline without proper sanitization. An attacker can inject arbitrary Cypher commands that are executed on the underlying Neo4j database, enabling data exfiltration, modification, or deletion. This vulnerability is fixed in 3.1.0.

According to its banner, the version of Flowise running on the remote host is < 3.1.0. It is, therefore, affected by multiple vulnerabilities :

- A Remote Code Execution Vulnerability through Airtable Agent

- A Cypher Injection in GraphCypherQAChain

- A Path Traversal in Vector Store basePath

- A Password Reset Link Sent Over Unsecured HTTP

- A resetPassword Authentication Bypass Vulnerability

- A Mass Assignment in DocumentStore Create Endpoint

- An SSRF Protection Bypass via Direct node-fetch

- A CSV Agent Prompt Injection Remote Code Execution Vulnerability

- A Sensitive Information Disclosure through public chatflow endpoints

- A Credit Abuse through an unauthenticated TTS endpoint

- An SSRF through Flowise Execute Flow

Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0,
    the GraphCypherQAChain node forwards user-provided input directly into the Cypher query execution pipeline
    without proper sanitization. An attacker can inject arbitrary Cypher commands that are executed on the
    underlying Neo4j database, enabling data exfiltration, modification, or deletion. This vulnerability is
    fixed in 3.1.0. (CVE-2026-41274)

ID	Name	Product	Family	Severity
115279	Flowise < 3.1.0 Multiples Vulnerabilities	Web App Scanning	Artificial Intelligence	critical
440826	SCA: security update for flowise, flowise-components (GHSA-28g4-38q8-3cwc)	Tenable Cloud Security	SCA Checks	critical
440826	SCA: security update for flowise, flowise-components (GHSA-28g4-38q8-3cwc)	Tenable Self-Hosted Container Security	SCA Checks	critical

Detections

Analytics

CVE-2026-41274

critical

Tenable Plugins

critical

critical

critical