p PatchFirst

PatchFirst · Latest vulnerabilities

mcp-neo4j-cypher vulnerabilities

Vulnerabilities published for mcp-neo4j-cypher in the last 30 days: 0. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗
Filter vulnerabilities
Clear filters

Vulnerabilities: 2

  1. CVE-2026-35402

    Low · CVSS 2.3EPSS 0.26%Fix available

    mcp-neo4j-cypher: SSRF and Data Modification via read_only Mode Bypass Through CALL Procedures

    mcp-neo4j-cypher is an MCP server for executing Cypher queries against Neo4j databases. In versions prior to 0.6.0, the read_only mode enforcement can be bypassed using APOC CALL procedures, potentially allowing unauthorized write operations or server-side request forgery. This issue is fixed in version 0.6.0.

    mcp-neo4j-cypherPython
    • Update to 0.6.0
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  2. CVE-2025-10193

    High · CVSS 7.4EPSS 0.22%Fix available

    Neo4j Cypher MCP server is vulnerable to DNS rebinding attacks

    DNS rebinding vulnerability in Neo4j Cypher MCP server allows malicious websites to bypass Same-Origin Policy protections and execute unauthorised tool invocations against locally running Neo4j MCP instances. The attack relies on the user being enticed to visit a malicious website and spend sufficient time there for DNS rebinding to succeed.

    mcp-neo4j-cypherPython
    • Update to 0.4.0
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →