CVE-2024-7042

What it actually does

Prompt injection in GraphCypherQAChain allows crafted inputs to generate and execute arbitrary Cypher queries, enabling unauthorized node/relationship creation, updates, deletion, data extraction, and cross-tenant access.

Why it matters to the business

Attackers can delete or alter critical data, steal sensitive information across tenants, or cause service outages, leading to data loss, compliance violations, and operational disruption in applications using the affected library.

How an attack unfolds

An attacker supplies malicious prompts to the GraphCypherQAChain interface; the chain converts the input into a Cypher query without sufficient sanitization, allowing the query to execute arbitrary graph database operations such as data exfiltration or deletion.

How to fix it

Upgrade hwchase17/langchain to the commit 9a31ad6f606ae223e4ea382cecef9612f98a2c3e or later; implement strict input validation and least-privilege database accounts for any remaining chain usage.

How to confirm the fix worked

Confirm the library version is at or beyond commit 9a31ad6f606ae223e4ea382cecef9612f98a2c3e; test with known prompt injection payloads to verify queries remain restricted to intended operations.

Typical attack path

1. Identify an application endpoint or interface that accepts user input passed to GraphCypherQAChain
2. Craft a prompt containing instructions that override the intended query logic to produce malicious Cypher
3. Submit the prompt to trigger query generation and execution against the graph database
4. Observe results for data manipulation, exfiltration, or denial of service effects

How to detect it

Inspect application and database logs for unexpected Cypher statements containing DELETE, CREATE, or MATCH patterns originating from user-controlled input; correlate with chain invocation timestamps.

What your security team should do

• Immediately upgrade all instances to the fixed commit
• Review and restrict database permissions used by the chain
• Add runtime monitoring for anomalous Cypher query patterns
• Disable or replace GraphCypherQAChain where possible until validated