Flexible GraphRAG: Cypher/Graph Injection via broken string-escaping in FalkorDB adapter (_escape()) - full graph wipe from ingested-document content
CVE-2026-114510
Description def escape(v: str) -> str: return str(v).replace("'", "\\'").replace("\\", "\\\\") The escaping order is backwards, exactly like the classic HTML double-escape bug: step 1 inserts a literal backslash in front of every ', then step 2 re-matches that just-inserted backslash and doubles it. For an input ending in a single quote, the two steps combined produce \\' (two backslashes followed by the quote) in the output — which, under the standard backslash-escape convention used by Cypher/openCypher single-quoted string literals, is parsed as one escaped backslash followed by an unescaped, string-terminating quote. The quote is not neutralized; the string breaks open. This escaped value is interpolated directly into Cypher query strings built by string formatting (not parameters) at 5 call sites in the same method: self.lcgraph.query( f"MERGE (n:{node.type} {{id: '{escape(node.id)}'}}) " f"{props}" f"RETURN distinct 'done' AS result" ) ... self.lcgraph.query( f"MATCH (a:{rel.source.type} {{id: '{escape(rel.source.id)}'}}), " f"(b:{rel.target.type} {{id: '{escape(rel.target.id)}'}}) " f"MERGE (a)-[r:{reltype}]->(b) " f"{props}" f"RETURN distinct 'done' AS result" ) node.type,…
Assessment
- CVSS
- 7.1 (v3.1)
- Severity
- High
- EPSS
- 0.00365% chance of exploitation in the next 30 days
- Known exploited
- Not listed in CISA KEV
- Exploit availability
- Nothing found in Exploit-DB, Metasploit, Nuclei or public PoC repositories
- Published
- 27 October 2026
- Last updated
- 27 October 2026
- Affected
- pip · flexible-graphrag
- Weakness
- CWE-116, CWE-943
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
At the source
References
- https://github.com/stevereiner/flexible-graphrag/security/advisories/GHSA-vqrg-773h-4wxc
- https://nvd.nist.gov/vuln/detail/CVE-2026-114510
- https://github.com/stevereiner/flexible-graphrag/commit/9ace8d47e198ce3f15dbf22853e396ab4e9884fa
- https://github.com/stevereiner/flexible-graphrag/releases/tag/v0.8.2
- https://github.com/advisories/GHSA-vqrg-773h-4wxc
Community proofs of concept
No community proof of concept yet. If you have one for a published vulnerability and the right to share it, add it below — it will appear here once reviewed.
Submit a proof of concept
Only for publicly disclosed vulnerabilities, and only material from testing you were authorised to perform. This platform does not buy, sell, or broker exploits — see earning from vulnerability research for legitimate bounty programs. Submissions are reviewed before they appear. Text only; do not include live credentials, personal data, or anything targeting systems you are not permitted to test.
Query this programmatically
Agents can read this through the MCP endpoint, or over HTTP:
curl https://cve.zerocrew.in/api/cve/CVE-2026-114510