CVE-2026-32247 - Vulnerability Analysis

Overview

Graphiti < 0.28.2 contains a Cypher injection caused by unvalidated concatenation of attacker-controlled label values in shared search-filter construction for non-Kuzu backends, letting attackers execute arbitrary Cypher queries, exploit requires attacker-controlled input via SearchFilters.node_labels or LLM prompt injection.

Severity & Score

Impact

Attackers can execute arbitrary Cypher queries on affected backends, potentially leading to data manipulation or disclosure.

Mitigation

Update to version 0.28.2 or later.

References

• https://github.com/getzep/graphiti/commit/7d65d5e77e89a199a62d737634eaa26dbb04d037
• https://github.com/getzep/graphiti/pull/1312
• https://github.com/getzep/graphiti/releases/tag/v0.28.2
• https://github.com/getzep/graphiti/security/advisories/GHSA-gg5m-55jj-8m5g

Social Media Activity(1 post)

TheHackerWire

@thehackerwire

Mar 12, 2026

🟠 CVE-2026-32247 - High (8.1) Graphiti is a framework for building and querying temporal context graphs for AI agents. Graphiti versions before 0.28.2 contained a Cypher injection vulnerability in shared search-filter construction for non-Kuzu backends. Attacker-controlled lab... 🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-32247/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner