Vulners
Lucene search
CVE-2026-55615 Langroid: Neo4jChatAgent executes LLM-generated Cypher without validation (prompt-to-Cypher injection; config-conditional RCE), mirroring the SQLChatAgent bug fixed in CVE-2026-25879
| Reporter | Title | Published | Views | Family All 7 |
|---|---|---|---|---|
 | CVE-2026-55615 | 6 Jul 202621:38 | ā | circl |
 | CVE-2026-55615 | 9 Jul 202623:40 | ā | cve |
 | Langroid: Neo4jChatAgent executes LLM-generated Cypher without validation (prompt-to-Cypher injection; config-conditional RCE), mirroring the SQLChatAgent bug fixed in CVE-2026-25879 | 6 Jul 202621:22 | ā | github |
 | CVE-2026-55615 | 10 Jul 202600:16 | ā | nvd |
 | GHSA-2PQ5-3Q89-J7CC Langroid: Neo4jChatAgent executes LLM-generated Cypher without validation (prompt-to-Cypher injection; config-conditional RCE), mirroring the SQLChatAgent bug fixed in CVE-2026-25879 | 6 Jul 202621:22 | ā | osv |
 | PT-2026-56085 | 6 Jul 202600:00 | ā | ptsecurity |
 | Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') | 6 Jul 202621:22 | ā | snyk |
[
{
"vendor": "langroid",
"product": "langroid",
"versions": [
{
"version": "< 0.65.5",
"status": "affected"
}
]
}
]Data
Build on a solid foundation withĀ Vulners data
WeĀ provide theĀ essential building blocks forĀ cybersecurity solutions withĀ comprehensive, structured, andĀ constantly updated vulnerability andĀ exploits data
Api
Power your application withĀ Vulners API
The Vulners REST API offers reliable, high-performance access toĀ vulnerabilityĀ intelligence, withĀ 99.9%Ā SLAĀ uptime andĀ CDN-backed data delivery forĀ seamlessĀ global access
App
Assess and manage vulnerabilities withĀ VulnersĀ tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
09 Jul 2026 23:40Current
CVSS 49.2