CVE-2026-42156
Flowsint: Cypher query injection in node type on node creation
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
Flowsint is an open-source OSINT graph exploration tool designed for cybersecurity investigation, transparency, and verification. Prior to 1.2.3, a remote attacker can create a node with a malicious type that can escape an existing Cypher query and an adversary can execute an arbitrary Cypher query. This vulnerability is fixed in 1.2.3.
| CWE | CWE-943 |
| Vendor | reconurge |
| Product | flowsint |
| Published | May 12, 2026 |
| Last Updated | May 13, 2026 |
Stay Ahead of the Next One
Get instant alerts for reconurge flowsint
Be the first to know when new unknown vulnerabilities affecting reconurge flowsint are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
reconurge / flowsint
< 1.2.3