Vulnerability details
CVE-2025-10193
neo4j neo4j-cypher MCP server
Neo4j Cypher MCP server is vulnerable to DNS rebinding attacks
CVSS 4.0
7.4High
Official description
DNS rebinding vulnerability in Neo4j Cypher MCP server allows malicious websites to bypass Same-Origin Policy protections and execute unauthorised tool invocations against locally running Neo4j MCP instances. The attack relies on the user being enticed to visit a malicious website and spend sufficient time there for DNS rebinding to succeed.
CVSS scores
| Score | Version | Source | Vector |
|---|---|---|---|
| 7.4High | 4.0 | CVEProject cvelistV5 (CNA) (Neo4j) | CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/AU:N/V:D/RE:L/U:Amber |
Affected products
| Vendor | Product | Versions | Source |
|---|---|---|---|
| neo4j | neo4j-cypher MCP server | 0.2.2 ≤ v ≤ 0.3.1 | CVEProject cvelistV5 (CNA) |
References and advisories
3- https://neo4j.com/security/cve-2025-10193 vendor-advisory
- https://github.com/neo4j-contrib/mcp-neo4j/security/advisories/GHSA-vcqx-v2mg-7chx third-party-advisory
- https://github.com/neo4j-contrib/mcp-neo4j/releases/tag/mcp-neo4j-cypher-v0.4.0 release-notes
Kolun on Telegram @kolunsec
Exploited CVEs, key news and a daily digest
Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.
Details
- Published
- 2025-09-11
- Last updated
- 2026-02-26
- State
- Published
- Assigner (CNA)
- Neo4j
Exploit prediction (EPSS)
0.22%
Probability of exploitation in 30 days
12.6%
Percentile (among all CVEs)
SSVC assessment (CISA)
- Automatable
- No
- Exploitation
- None
- Technical impact
- Total
Weaknesses (CWE)
- CWE-346Origin Validation Error