Vulnerability in Getzep Graphiti
CVE-2026-32247
Graphiti is a framework for building and querying temporal context graphs for AI agents. Graphiti versions before 0.28.2 contained a Cypher injection vulnerability in shared search-filter construction for non-Kuzu backends. Attacker-controlled label values supplied through SearchFilters.node_labels were concatenated directly into Cypher label expressions without validation. In MCP deployments, this was exploitable not only through direct untrusted access to the Graphiti MCP server, but also through prompt injection against an LLM client that could be induced to call search_nodes with attacker-controlled entity_types values. The MCP server mapped entity_types to SearchFilters.node_labels, which then reached the vulnerable Cypher construction path. Affected backends included Neo4j, FalkorDB, and Neptune. Kuzu was not affected by the label-injection issue because it used parameterized label handling rather than string-interpolated Cypher labels. This issue was mitigated in 0.28.2.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 8.1 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N.
EPSS exploit prediction
EPSS: 0.005 (39.3th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 39th percentile — 39.3% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.003 · newest: 0.005 · change: +0.001
Affected products
- Getzep Graphiti — versions < 0.28.2
Weakness classification (CWE)
Public proof-of-concept exploits
References
- github.com/getzep/graphiti/security/advisories/GHSA-gg5m-55jj-8m5g (Mitigation, Vendor Advisory)
- github.com/getzep/graphiti/pull/1312 (Patch, Issue Tracking)
- github.com/getzep/graphiti/commit/7d65d5e77e89a199a62d737634eaa26dbb04d037 (Patch)
- github.com/getzep/graphiti/releases/tag/v0.28.2 (Release Notes)
Frequently asked questions
- What is CVE-2026-32247?
- CVE-2026-32247 is a high-severity vulnerability in Getzep Graphiti, classified under Improper Neutralization of Special Elements in Data Query Logic. CVSS score: 8.1/10. Published 2026-03-12.
- How severe is CVE-2026-32247?
- High severity. CVSS v3 base score is 8.1 out of 10.
- Is CVE-2026-32247 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.