CVE-2026-5423 Subscription Authentication Bypass via Unverified connectionParams.jwt

@neo4j/graphql library versions prior to 7.5.6 fail to verify the authenticity of a client-supplied, pre-decoded JWT object passed through GraphQL subscription connectionParams. As a result, any unauthenticated remote client that can open a GraphQL-over-WebSocket connection can forge arbitrary JW...

EUVD-2026-54094

@neo4j/graphql library versions prior to 7.5.6 fail to verify the authenticity of a client-supplied, pre-decoded JWT object passed through GraphQL subscription connectionParams. As a result, any unauthenticated remote client that can open a GraphQL-over-WebSocket connection can forge arbitrary JW...

Linux Distros Unpatched Vulnerability : CVE-2026-14587

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Neo4j's Bolt modern handshake decoder treats an overlong capability bit mask the same way it treats a truncated bit mask. When an unauthenticated client sends a...

EUVD-2026-53446

Neo4j's Bolt modern handshake decoder treats an overlong capability bit mask the same way it treats a truncated bit mask. When an unauthenticated client sends a selected protocol version followed by 32 continuation bytes in the capability mask, the decoder resets the reader index and waits for mo...

CVE-2026-14587

Summary (supported): CVE-2026-14587 affects Neo4j’s Bolt handshake decoder. An unauthenticated client can trigger the Bolt channel by sending a protocol version followed by 32 continuation bytes in the capability mask. The decoder mis-handles an overlong capability mask by resetting the reader in...

CVE-2026-14587 Unathenticated connection can hold Bolt channel open

Neo4j's Bolt modern handshake decoder treats an overlong capability bit mask the same way it treats a truncated bit mask. When an unauthenticated client sends a selected protocol version followed by 32 continuation bytes in the capability mask, the decoder resets the reader index and waits for mo...

GHSA-93WV-JW9V-4972 vulnerabilities

Vulnerabilities for packages: neo4j, localstack, seata, druid, opensearch, keycloak-fips, kafbat-ui-fips, spark-fips, elasticsearch, celeborn, kayenta, metabase, kserve-modelmesh, spark, zipkin, apache-camel-karavan-devmode, spark-kubernetes-operator-fips, camunda-zeebe, keycloak...

CVE-2026-56819 vulnerabilities

Vulnerabilities for packages: neo4j, localstack, seata, druid, opensearch, keycloak-fips, kafbat-ui-fips, spark-fips, elasticsearch, celeborn, kayenta, metabase, kserve-modelmesh, spark, zipkin, apache-camel-karavan-devmode, spark-kubernetes-operator-fips, camunda-zeebe, keycloak...

GHSA-93WV-JW9V-4972 vulnerabilities

Vulnerabilities for packages: neo4j, druid, zipkin, keycloak, spark, kserve-modelmesh...

CVE-2026-56819 vulnerabilities

Vulnerabilities for packages: neo4j, druid, zipkin, keycloak, spark, kserve-modelmesh...

CVE-2026-6790 vulnerabilities

Vulnerabilities for packages: neo4j, dependency-track, akhq, druid, confluent-kafka, solr...

GHSA-7P3P-8QV8-M2VH vulnerabilities

Vulnerabilities for packages: neo4j, dependency-track, akhq, druid, confluent-kafka, solr...

CVE-2026-10051 vulnerabilities

Vulnerabilities for packages: neo4j, dependency-track, akhq, druid, strimzi-kafka-operator, confluent-kafka, solr...

CVE-2026-10050 vulnerabilities

Vulnerabilities for packages: neo4j, dependency-track, akhq, druid, tez, confluent-kafka, solr, apache-tika...

GHSA-W7X5-G22V-XQHR vulnerabilities

Vulnerabilities for packages: neo4j, dependency-track, akhq, druid, strimzi-kafka-operator, confluent-kafka, solr, trino...

GHSA-F4V5-65JJ-PCR2 vulnerabilities

Vulnerabilities for packages: neo4j, dependency-track, akhq, druid, strimzi-kafka-operator, confluent-kafka, solr...

GHSA-2FVJ-HGJ9-J2GR vulnerabilities

Vulnerabilities for packages: neo4j, dependency-track, akhq, druid, tez, confluent-kafka, solr, apache-tika...

CVE-2026-8384 vulnerabilities

Vulnerabilities for packages: neo4j, dependency-track, akhq, druid, strimzi-kafka-operator, confluent-kafka, solr, trino...

PYSEC-2026-2576 Langroid: Neo4jChatAgent executes LLM-generated Cypher without validation (prompt-to-Cypher injection; config-conditional RCE), mirroring the SQLChatAgent bug fixed in CVE-2026-25879

Neo4jChatAgent passes LLM-generated Cypher queries straight to the Neo4j driver with no validation, no statement-type allowlist, and no opt-out gate. The query text is influenceable by prompt injection direct user input or indirect content the agent reads back via RAG, so an attacker who can...

PYSEC-2026-2626 Neo4j Labs MCP Servers: SSRF and Data Modification via read_only Mode Bypass Through CALL Procedures

Summary The readonly mode in mcp-neo4j-cypher versions prior to 0.6.0 can be bypassed using CALL procedures. Details Impact The enforcing of readonly mode in vulnerable versions could be bypassed by certain APOC procedures. Patches v0.6.0 release hardened the checks around the mode. The only way ...