Zero Radar
← feed
HighVulnerabilityCVE-2026-114510updated 27 Oct 2026, 15:33 UTC

Flexible GraphRAG FalkorDB adapter lets crafted documents run database commands

A malicious document you ingest can trick the system into running hidden database commands. These can delete or read the whole knowledge graph.

Fixed in 0.8.2Official, 2 sources
SeverityHighCVSS 7.1 of 10
Being exploited?UnclearNo reports either way yet
Fix available?Yes0.8.2 · since 27 Oct 2026
How sure is this?Official, 2 sourcesBacked by an official source

How the attack works simplified

  1. 1Malicious documentHidden text planted in a file you ingest
  2. 2LLM extractionModel outputs a crafted entity name
  3. 3Broken escapingQuote is not neutralized by _escape()
  4. 4Injected Cypher runsExtra query clause is executed on FalkorDB
  5. ResultGraph data deleted or exposed

What happened

In the FalkorDB adapter, the _escape() helper escapes quotes and backslashes in the wrong order, so quotes are not neutralized; escaped values and node/relationship type names are then string-formatted into Cypher queries instead of parameterized, enabling Cypher injection.

Why it is dangerous: An attacker can wipe every node and relationship in the graph with one crafted document, or read graph data that the application shows to users or the LLM.

Are you affected?

You are affected if you use flexible-graphrag version 0.6.0 up to (not including) 0.8.2 with GRAPH_BACKEND=langchain and GRAPH_DB=falkordb.

Package / productAffected versionsFixed in
flexible-graphrag · pip>= 0.6.0, < 0.8.20.8.2

What to do

  1. Upgrade flexible-graphrag to version 0.8.2 or later
  2. If you cannot upgrade yet, switch GRAPH_DB away from falkordb or stop ingesting untrusted documents
  3. Review the graph for unexpected deletions or changes and restore from backup if needed

Timeline

  1. 22 Oct 2026, 15:17 UTC
    Publicly disclosed
  2. 22 Oct 2026, 15:17 UTC
    Reported by NVD · NVD
  3. 27 Oct 2026, 15:33 UTC
    GitHub Advisory reported on it · GitHub Advisory
  4. 27 Oct 2026, 15:33 UTC
    Fixed version published: flexible-graphrag 0.8.2 · GitHub Advisory

Sources 2 reports, oldest first

Official vendor, government CERT or advisory database

Technical details

ID
CVE-2026-114510 · GHSA-vqrg-773h-4wxc
CVSS
7.1 / 10
EPSS
0.4% chance of exploitation within 30 days
Disclosed
22 Oct 2026, 15:17 UTC
On Zero Radar
before the radar started
Last change
27 Oct 2026, 15:33 UTC

The plain-language parts and the attack diagram were written by an AI model (anthropic/claude-haiku-5.5) from the sources above. Facts like versions, exploitation and dates come from the sources themselves. How Zero Radar works

Flexible GraphRAG FalkorDB adapter lets crafted documents run database commands · Zero Radar