graphiti vulnerabilities

2 known vulnerabilities in graphiti from Getzep. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.3 High severity

  graphiti: Improper Authentication

  CVE-2026-90601Sep 13, 2026Getzep

  A vulnerability was found in getzep graphiti up to 0.30.2. Affected is an unknown function of the file server/graph_service/main.py of the component REST API. The manipulation results in improper authentication. The attack can be launched remotely. The pull re

• 8.1 High severity

  graphiti: Improper Neutralization of Special Elements in Data Query Logic

  CVE-2026-32247Mar 12, 2026Getzep

  Graphiti is a framework for building and querying temporal context graphs for AI agents. Graphiti versions before 0.28.2 contained a Cypher injection vulnerability in shared search-filter construction for non-Kuzu backends. Attacker-controlled label values sup