CVE-2025-10193 Neo4j Cypher MCP server is vulnerable to DNS rebinding attacks

DNS rebinding vulnerability in Neo4j Cypher MCP server allows malicious websites to bypass Same-Origin Policy protections and execute unauthorised tool invocations against locally running Neo4j MCP instances. The attack relies on the user being enticed to visit a malicious website and spend...

CVE-2025-10193

CVE-2025-10193 : DNS rebinding vulnerability in the Neo4j Cypher MCP server allows a malicious website to bypass Same-Origin Policy and trigger unauthorised local tool invocations. The attack relies on a user visiting a crafted site for enough time to succeed. Public details indicate impact on th...

CVE-2025-10193 Neo4j Cypher MCP server is vulnerable to DNS rebinding attacks

DNS rebinding vulnerability in Neo4j Cypher MCP server allows malicious websites to bypass Same-Origin Policy protections and execute unauthorised tool invocations against locally running Neo4j MCP instances. The attack relies on the user being enticed to visit a malicious website and spend...

CVE-2025-10193 Neo4j Cypher MCP server is vulnerable to DNS rebinding attacks

DNS rebinding vulnerability in Neo4j Cypher MCP server allows malicious websites to bypass Same-Origin Policy protections and execute unauthorised tool invocations against locally running Neo4j MCP instances. The attack relies on the user being enticed to visit a malicious website and spend...

PT-2025-37184

Name of the Vulnerable Software and Affected Versions: Neo4j Cypher MCP server affected versions not specified Description: A DNS rebinding issue exists in the Neo4j Cypher MCP server. This allows malicious websites to circumvent Same-Origin Policy protections and execute unauthorized tool...

CVE-2025-10193: Origin Validation Error

DNS rebinding vulnerability in Neo4j Cypher MCP server allows malicious websites to bypass Same-Origin Policy protections and execute unauthorised tool invocations against locally running Neo4j MCP instances. The attack relies on the user being enticed to visit a malicious website and spend...

Neo4j MCP Clients & Servers 安全漏洞

Neo4j MCP Clients & Servers is a protocol for managing large language model contexts in the Neo4j Contrib open source. A security vulnerability exists in Neo4j MCP Clients & Servers, which stems from a DNS rebinding vulnerability that could lead to bypassing same-origin policy protections and...

CVE-2025-56406

An issue was discovered in mcp-neo4j 0.3.0 allowing attackers to obtain sensitive information or execute arbitrary commands via the SSE service. NOTE: the Supplier's position is that authentication is not mandatory for MCP servers, and the mcp-neo4j MCP server is only intended for use in a local...

CVE-2025-56406

An issue was discovered in mcp-neo4j 0.3.0 allowing attackers to obtain sensitive information or execute arbitrary commands via the SSE service. NOTE: the Supplier's position is that authentication is not mandatory for MCP servers, and the mcp-neo4j MCP server is only intended for use in a local...

Neo4j MCP Clients & Servers 安全漏洞

Neo4j MCP Clients & Servers is a Neo4j Contrib open source protocol for managing large language model contexts. A security vulnerability exists in Neo4j MCP Clients & Servers version 0.3.0, which originates in the SSE service and could lead to the disclosure of sensitive information or the...

CVE-2025-56406

An issue was discovered in mcp-neo4j 0.3.0 allowing attackers to obtain sensitive information or execute arbitrary commands via the SSE service. NOTE: the Supplier's position is that authentication is not mandatory for MCP servers, and the mcp-neo4j MCP server is only intended for use in a local...

CVE-2025-56406

An issue was discovered in mcp-neo4j 0.3.0 allowing attackers to obtain sensitive information or execute arbitrary commands via the SSE service. NOTE: the Supplier's position is that authentication is not mandatory for MCP servers, and the mcp-neo4j MCP server is only intended for use in a local...

PT-2025-37048

Name of the Vulnerable Software and Affected Versions: mcp-neo4j version 0.3.0 Description: An issue was discovered that allows attackers to gain sensitive information or execute arbitrary commands via the SSE service. Recommendations: At the moment, there is no information about a newer version...

CVE-2025-56406: Improper Neutralization of Special Elements used in a Command

An issue was discovered in mcp-neo4j 0.3.0 allowing attackers to obtain sensitive information or execute arbitrary commands via the SSE service. NOTE: the Supplier's position is that authentication is not mandatory for MCP servers, and the mcp-neo4j MCP server is only intended for use in a local...

CVE-2025-58056 vulnerabilities

Vulnerabilities for packages: flyway, sonarqube, apache-hop, grpc-java-fips, wavefront-proxy, camunda-zeebe, apache-nifi, opensearch, localstack, selenium, kayenta-fips, zipkin, wildfly, infinispan, apache-hop-fips, kserve-modelmesh, apache-activemq-artemis, neo4j, kayenta, keycloak, spark-fips,...

GHSA-FGHV-69VJ-QJ49 vulnerabilities

Vulnerabilities for packages: flyway, sonarqube, apache-hop, grpc-java-fips, wavefront-proxy, camunda-zeebe, apache-nifi, opensearch, localstack, selenium, kayenta-fips, zipkin, wildfly, infinispan, apache-hop-fips, kserve-modelmesh, apache-activemq-artemis, neo4j, kayenta, keycloak, spark-fips,...

CVE-2025-55163 vulnerabilities

Vulnerabilities for packages: flyway, sonarqube, apache-hop, grpc-java-fips, management-api-for-apache-cassandra-5.0, camunda-zeebe, apache-nifi, opensearch, localstack, wildfly, infinispan, apache-hop-fips, kserve-modelmesh, keycloak, spark-fips, spark, management-api-for-apache-cassandra-4.0,...

GHSA-PRJ3-CCX8-P6X4 vulnerabilities

Vulnerabilities for packages: flyway, sonarqube, apache-hop, grpc-java-fips, management-api-for-apache-cassandra-5.0, camunda-zeebe, apache-nifi, opensearch, localstack, wildfly, infinispan, apache-hop-fips, kserve-modelmesh, keycloak, spark-fips, spark, management-api-for-apache-cassandra-4.0,...

CVE-2025-48924 vulnerabilities

Vulnerabilities for packages: flyway, leiningen, maven-stage0, apache-hop, sonarqube, tritonserver-backend-vllm-cuda-12.9, nextflow, apache-tika, camunda-zeebe, kafka, management-api-for-apache-cassandra-5.0, apache-nifi, opensearch, py3-vllm-cuda-12.4, commercial-elasticsearch, localstack,...

GHSA-J288-Q9X7-2F5V vulnerabilities

Vulnerabilities for packages: flyway, leiningen, maven-stage0, apache-hop, sonarqube, tritonserver-backend-vllm-cuda-12.9, nextflow, apache-tika, camunda-zeebe, kafka, management-api-for-apache-cassandra-5.0, apache-nifi, opensearch, py3-vllm-cuda-12.4, commercial-elasticsearch, localstack,...