PT-2025-37184 · Neo4J · Neo4J-Cypher Mcp Server

Evan Harris · Published 2025-09-11 · Updated 2025-10-16 · CVE-2025-10193

Positive Technologies (AI Summary)

CVSS v4.0

7.4

High

Base vector

AV:N/AC:H/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:X/V:D/RE:L/U:Amber

Name of the Vulnerable Software and Affected Versions: Neo4j Cypher MCP server (affected versions not specified)

Description: A DNS rebinding issue exists in the Neo4j Cypher MCP server. This allows malicious websites to circumvent Same-Origin Policy protections and execute unauthorized tool invocations against local Neo4j MCP instances. The attack requires a user to visit a malicious website and remain there long enough for DNS rebinding to occur.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Origin Validation Error

Weakness Enumeration

CWE-346

Related Identifiers

CVE-2025-10193

GHSA-VCQX-V2MG-7CHX

Affected Products

Neo4J-Cypher Mcp Server

References · 12

• https://neo4j.com/security/cve-2025-10193 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-10193 · Security Note
• https://osv.dev/vulnerability/CVE-2025-10193 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-vcqx-v2mg-7chx · Vendor Advisory
• https://github.com/neo4j-contrib/mcp-neo4j · Note
• https://github.com/neo4j-contrib/mcp-neo4j/security/advisories/GHSA-vcqx-v2mg-7chx · Note
• https://github.com/neo4j-contrib/mcp-neo4j/releases/tag/mcp-neo4j-cypher-v0.4.0 · Note
• https://github.com/neo4j-contrib/mcp-neo4j/pull/165 · Note
• https://github.com/neo4j-contrib/mcp-neo4j/commit/5b9fbdda6401668d7aa006daf7e644805c067c15 · Note
• https://twitter.com/dailycve/status/1966287343054405733 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1966170606837100996 · Twitter Post
• https://twitter.com/Evan__Harris/status/1978842929306419616 · Twitter Post