CVE-2026-32247

Graphiti is a framework for building and querying temporal context graphs for AI agents. Graphiti versions before 0.28.2 contained a Cypher injection vulnerability in shared search-filter construction for non-Kuzu backends. Attacker-controlled label values supplied through SearchFilters.nodelabel...

CVE-2026-32247 Graphiti vulnerable to Cypher Injection via unsanitized node_labels in search filters

Graphiti is a framework for building and querying temporal context graphs for AI agents. Graphiti versions before 0.28.2 contained a Cypher injection vulnerability in shared search-filter construction for non-Kuzu backends. Attacker-controlled label values supplied through SearchFilters.nodelabel...

iflow-mcp-c-bjorn-megamem (=1.2.5) potentially affected by CVE-2026-32247 via graphiti-core (=0.22.0)

graphiti-core PYPI version =0.22.0 is affected by a known vulnerability. The following packages have a transitive dependency on graphiti-core and may be impacted: - iflow-mcp-c-bjorn-megamem =1.2.5 Source cves: CVE-2026-32247 Source advisory: OSV:GHSA-GG5M-55JJ-8M5G...

Improper Neutralization of Special Elements in Data Query Logic

Overview graphiti-core is an A temporal graph building library Affected versions of this package are vulnerable to Improper Neutralization of Special Elements in Data Query Logic via the SearchFilters.nodelabels process. An attacker can execute arbitrary Cypher queries within the privileges of th...

iflow-mcp-c-bjorn-megamem (=1.2.5) potentially affected by CVE-2026-32247 via graphiti-core (=0.22.0)

graphiti-core PYPI version =0.22.0 is affected by a known vulnerability. The following packages have a transitive dependency on graphiti-core and may be impacted: - iflow-mcp-c-bjorn-megamem =1.2.5 Source cves: CVE-2026-32247 Source advisory: SNYK:PYTHON-GRAPHITICORE-15627260...

EUVD-2026-11682

Graphiti vulnerable to Cypher Injection via unsanitized nodelabels in search filters...

GHSA-GG5M-55JJ-8M5G Graphiti vulnerable to Cypher Injection via unsanitized node_labels in search filters

Summary Graphiti versions before 0.28.2 contained a Cypher injection vulnerability in shared search-filter construction for non-Kuzu backends. Attacker-controlled label values supplied through SearchFilters.nodelabels were concatenated directly into Cypher label expressions without validation. In...

Graphiti vulnerable to Cypher Injection via unsanitized node_labels in search filters

Summary Graphiti versions before 0.28.2 contained a Cypher injection vulnerability in shared search-filter construction for non-Kuzu backends. Attacker-controlled label values supplied through SearchFilters.nodelabels were concatenated directly into Cypher label expressions without validation. In...

PT-2026-25057

Name of the Vulnerable Software and Affected Versions Graphiti versions prior to 0.28.2 Description Graphiti, a framework for building and querying temporal context graphs for AI agents, had a Cypher injection issue in shared search-filter construction for non-Kuzu backends. Attacker-controlled...

Graphiti 安全漏洞

Graphiti is a framework developed by Zep for building temporal context graphs for AI agents. Versions of Graphiti prior to 0.28.2 contained security vulnerabilities. These vulnerabilities stemmed from Cypher injections in the shared search filter construction that occurs outside of the Kuzu...