PT-2025-37184 · Neo4J · Neo4J-Cypher Mcp Server

Evan Harris · CVE-2025-10193 · Published 2025-09-11 · Updated 2026-07-07

Positive Technologies (AI Summary)

CVSS v4.0

7.4

High

Base vector

AV:N/AC:H/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/AU:N/V:D/RE:L/U:Amber

Name of the Vulnerable Software and Affected Versions: Neo4j Cypher MCP server (affected versions not specified)

Description: A DNS rebinding issue exists in the Neo4j Cypher MCP server. This allows malicious websites to circumvent Same-Origin Policy protections and execute unauthorized tool invocations against local Neo4j MCP instances. The attack requires a user to visit a malicious website and remain there long enough for DNS rebinding to occur.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Origin Validation Error

Weakness Enumeration

CWE-346

Related Identifiers

CVE-2025-10193

GHSA-VCQX-V2MG-7CHX

PYSEC-2026-1620

Affected Products

Neo4J-Cypher Mcp Server

References · 17

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/10xxx/CVE-2025-10193.json · Exploit
• https://osv.dev/vulnerability/PYSEC-2026-1620 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-10193 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-10193 · Security Note
• https://neo4j.com/security/cve-2025-10193 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-vcqx-v2mg-7chx · Vendor Advisory
• https://github.com/neo4j-contrib/mcp-neo4j/security/advisories/GHSA-vcqx-v2mg-7chx · Note
• https://github.com/neo4j-contrib/mcp-neo4j/releases/tag/mcp-neo4j-cypher-v0.4.0 · Note
• https://github.com/neo4j-contrib/mcp-neo4j · Note
• https://github.com/neo4j-contrib/mcp-neo4j/pull/165 · Note
• https://github.com/neo4j-contrib/mcp-neo4j/commit/5b9fbdda6401668d7aa006daf7e644805c067c15 · Note
• https://pypi.python.org · Note
• https://github.com/advisories/GHSA-vcqx-v2mg-7chx · Note
• https://pypi.org/project/mcp-neo4j-cypher · Note
• https://twitter.com/dailycve/status/1966287343054405733 · Twitter Post