p PatchFirst

CVE-2025-10193

CVE-2025-10193 · Neo4j Cypher MCP server is vulnerable to DNS rebinding attacks

This page contains facts from public vulnerability sources. Check the original advisory before updating.

DNS rebinding vulnerability in Neo4j Cypher MCP server allows malicious websites to bypass Same-Origin Policy protections and execute unauthorised tool invocations against locally running Neo4j MCP instances. The attack relies on the user being enticed to visit a malicious website and spend sufficient time there for DNS rebinding to succeed.

CVSS 7.4 · High · EPSS 0.2% · Fix available

Published
Updated

Stack: python

Affected products and versions

  • neo4j-cypher mcp server

    Versions
    • ≥ 0.2.2, ≤ 0.3.1: Affected (semver)

    No fix published

  • mcp-neo4j-cypher PyPI

    Versions
    • 0.2.2
    • 0.2.3
    • 0.2.4
    • 0.3.0
    • 0.3.1
    Affected ranges
    • ECOSYSTEM: ≥ 0.2.2, < 0.4.0

    Update to 0.4.0

Original sources

Check your server →