Neo4j vulnerabilities
We track 12 vulnerabilities in Neo4j products across 9 products. 12 are rated high or critical, and none are known to be exploited. The most recent was published on November 10, 2026.
Latest Neo4j vulnerabilities
- 8.7 High severity
@neo4j/graphql: Missing Authentication for Critical Functionality
Missing Authentication for Critical Function in aggregation queries in Neo4j @neo4j/graphql 5.0.0 before 5.12.17 and 7.0.0 before 7.6.8 allows remote attackers to read protected data via GraphQL aggregation queries. Field-level @authentication is not enforced
- 8.6 High severity
@neo4j/graphql: Incorrect Authorization
Incorrect authorization in the @authentication directive JWT where filter evaluation in Neo4j @neo4j/graphql versions 7.0.0 before 7.6.7 allows an attacker holding an otherwise-valid JWT to bypass all but the first filter condition via a multi-condition jwt wh
- 8.6 High severity
@neo4j/graphql: Incorrect Authorization
In @neo4j/graphql versions from 7.0.0 up to but not including 7.6.4, the none quantifier in @authorization filters on relationships and connections is not negated when translated to Cypher, so it behaves like some. A rule such as "none of the related denied us
- 9.3 Critical severity
@neo4j/graphql: Missing Authentication for Critical Functionality
In @neo4j/graphql versions up to and including 7.6.3, @authentication directives applied at the schema level or on the Query or Mutation types are silently ignored for top-level fields annotated with @cypher. Only @authentication directives placed directly on
- 7.6 High severity
graphql: Authorization Bypass Through User-Controlled Key
@neo4j/graphql from 5.2.0 until the patched versions fails to enforce field-level @authentication rules on root custom-resolver fields when a type-level @authentication rule is also present on the same operation type. When both a type-level @authentication (on
- 8.2 High severity
graphql: Authentication Bypass by Assumed-Immutable Data
@neo4j/graphql library versions prior to 7.5.6 fail to verify the authenticity of a client-supplied, pre-decoded JWT object passed through GraphQL subscription connectionParams. As a result, any unauthenticated remote client that can open a GraphQL-over-WebSoc
- 7.5 High severity
Enterprise Edition: Improper Handling of Length Parameter Inconsistency
Neo4j's Bolt modern handshake decoder treats an overlong capability bit mask the same way it treats a truncated bit mask. When an unauthenticated client sends a selected protocol version followed by 32 continuation bytes in the capability mask, the decoder res
- 9.8 Critical severity
Enterprise Edition: Improper Authentication
An edgecase in SSO implementation in Neo4j Enterprise edition versions prior to version 2026.02 can lead to unauthorised access under the following conditions: If a neo4j admin configures two or more OIDC providers AND configures one or more of them to be an a
- 7.2 High severity
Enterprise Edition: Incorrect Authorization
Incorrect resolving of namespaces in composite databases in Neo4j Enterprise edition prior to versions 2026.02 and 5.26.22 can lead to the following scenario: an admin that intends to give a user an access to a remote database constituent "namespace.name" will
- 7.4 High severity
neo4j-cypher MCP server: Origin Validation Error
DNS rebinding vulnerability in Neo4j Cypher MCP server allows malicious websites to bypass Same-Origin Policy protections and execute unauthorised tool invocations against locally running Neo4j MCP instances. The attack relies on the user being enticed to visi
- 8.1 High severity
apoc: Improper Restriction of XML External Entity Reference
APOC (Awesome Procedures on Cypher) is an add-on library for Neo4j. An XML External Entity (XXE) vulnerability found in the apoc.import.graphml procedure of APOC core plugin prior to version 5.5.0 and 4.4.0.14 (4.4 branch) in Neo4j graph database. XML External
- 7.5 High severity
Awesome Procedures On Cypher: Improper Limitation of a Pathname to a Restricted Directory
Neo4j APOC (Awesome Procedures on Cypher) before 4.3.0.7 and 4.x before 4.4.0.8 allows Directory Traversal to sibling directories via apoc.log.stream.