vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2025-10193

Neo4j Cypher MCP server is vulnerable to DNS rebinding attacks

HIGH
7.4
CVSS Score
Published: September 11, 2025 at 02:05 PM UTC
Updated: June 17, 2026 at 08:27 AM UTC
2 products affected across 2 vendorsMcp NEO4JCypher MCP Server

Using neo4j-cypher MCP server by neo4j?

Get instant alerts when new vulnerabilities affect neo4j-cypher MCP server - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
HIGH7.4
Exploit prediction
EPSS 0.2%
SSVC
No known exploit

Description

DNS rebinding vulnerability in Neo4j Cypher MCP server allows malicious websites to bypass Same-Origin Policy protections and execute unauthorised tool invocations against locally running Neo4j MCP instances. The attack relies on the user being enticed to visit a malicious website and spend sufficient time there for DNS rebinding to succeed.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Mcp NEO4J· NEO4J Contrib
85%
All versions
Cypher MCP Server· NEO4Jpypi
60%
0.2.2 ≤ v ≤ 0.3.10.2.2

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

References (3)

Release Notes
Source: 3b236295-4ccd-4a1f-a1c1-a72eecc8d7b6
https://github.com/neo4j-contrib/mcp-neo4j/releases/tag/mcp-neo4j-cypher-v0.4.0
Third Party Advisory
Source: 3b236295-4ccd-4a1f-a1c1-a72eecc8d7b6
https://github.com/neo4j-contrib/mcp-neo4j/security/advisories/GHSA-vcqx-v2mg-7chx
Vendor Advisory
Source: 3b236295-4ccd-4a1f-a1c1-a72eecc8d7b6
https://neo4j.com/security/cve-2025-10193

SSVC — Action Prioritization

SSVCNo known exploitNot automatableTotal impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

7.4HIGHNeo4j
Vector?

Quick Info

StatusDEFERRED
CWE
CWE-346

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card