Vulnerability · Published Mar 12, 2026 · Assigned by GitHub_M

CVE-2026-32247Graphiti vulnerable to Cypher Injection via unsanitized node_labels in search filters

High 8.1

In plain English

A high-severity security flaw in graphiti from getzep. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 30% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code. Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)8.1High

Exploit odds (30 days)0.4%top 70.3% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack tooling1Public PoC

Official description

Graphiti is a framework for building and querying temporal context graphs for AI agents. Graphiti versions before 0.28.2 contained a Cypher injection vulnerability in shared search-filter construction for non-Kuzu backends. Attacker-controlled label values supplied through SearchFilters.node_labels were concatenated directly into Cypher label expressions without validation. In MCP deployments, this was exploitable not only through direct untrusted access to the Graphiti MCP server, but also through prompt injection against an LLM client that could be induced to call search_nodes with attacker-controlled entity_types values. The MCP server mapped entity_types to SearchFilters.node_labels, which then reached the vulnerable Cypher construction path. Affected backends included Neo4j, FalkorDB, and Neptune. Kuzu was not affected by the label-injection issue because it used parameterized label handling rather than string-interpolated Cypher labels. This issue was mitigated in 0.28.2.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
PyPI	graphiti-core	0.28.2	GHSA-gg5m-55jj-8m5g
PyPI	graphiti-core	0.28.2	PYSEC-2026-2504

Affected products (as reported)

Vendor	Product	Versions
getzep	graphiti	< 0.28.2

Weakness: CWE-943 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

References

https://github.com/getzep/graphiti/security/advisories/GHSA-gg5m-55jj-8m5g x_refsource_CONFIRM
https://github.com/getzep/graphiti/pull/1312 x_refsource_MISC
https://github.com/getzep/graphiti/commit/7d65d5e77e89a199a62d737634eaa26dbb04d037 x_refsource_MISC
https://github.com/getzep/graphiti/releases/tag/v0.28.2 x_refsource_MISC