A broken string-escaping function in Flexible GraphRAG's FalkorDB adapter allows Cypher query injection through ingested document content, enabling full graph deletion or data exfiltration. An attacker can craft malicious documents that cause the LLM extraction layer to produce entity IDs containing injection payloads that bypass the flawed escape function.
Disclosed 27 October 2026 · Record updated 27 October 2026
Full Cypher clause injection allowing complete graph deletion, data exfiltration, or record tampering with no parameterization or read-only restrictions.
VulnerabilitiesA backwards string-escaping routine in Flexible GraphRAG's FalkorDB adapter lets poisoned documents run arbitrary Cypher, including a command that deletes every node.
27 Oct 2026
