PT-2026-33508 · Unknown · Mcp-Neo4J-Cypher

Published 2026-04-17 · Updated 2026-04-28 · CVE-2026-35402

Positive Technologies (AI Summary)

CVSS v4.0

2.3

Low

Base vector

AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions mcp-neo4j-cypher versions prior to 0.6.0

Description The read only mode enforcement can be bypassed using APOC CALL procedures. This may allow unauthorized write operations or server-side request forgery, which is a technique where an attacker induces a server to make requests to an unintended location. The impact of server-side request forgery depends on the system configuration and the presence of other accessible systems in the environment.

Recommendations Update to version 0.6.0. Limit APOC procedures to only those required. Manage data loading privileges. Maintain default settings for apoc.import.file.enabled as false and apoc.import.file.use neo4j config as true to restrict file imports to the import folder. Limit the permissions of the database credentials available to the server.

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2026-35402

GHSA-X3CV-R3G3-FPG9

Affected Products

Mcp-Neo4J-Cypher

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2026-35402 · Security Note
• https://osv.dev/vulnerability/GHSA-x3cv-r3g3-fpg9 · Vendor Advisory
• https://github.com/neo4j-contrib/mcp-neo4j/security/advisories/GHSA-x3cv-r3g3-fpg9 · Note
• https://github.com/neo4j-contrib/mcp-neo4j · Note
• https://github.com/neo4j-contrib/mcp-neo4j/releases/tag/mcp-neo4j-cypher-v0.6.0 · Note
• https://twitter.com/_cvereports/status/2049063910741807482 · Twitter Post
• https://twitter.com/CVEnew/status/2045467399848185918 · Twitter Post