Neo4j Cypher MCP server is vulnerable to DNS rebinding
Impact
DNS rebinding vulnerability in Neo4j Cypher MCP server allows malicious websites to bypass Same-Origin Policy protections and execute unauthorised tool invocations against locally running Neo4j MCP instances. The attack relies on the user being enticed to visit a malicious website and spend sufficient time there for DNS rebinding to succeed.
Patches
CORS Middleware added to Cypher MCP server v0.4.0 that blocks all web-based access by default.
Workarounds
If you cannot upgrade to v0.4.0 and above, use stdio mode.
References
Vendor Advisory https://www.cve.org/CVERecord?id=CVE-2025-10193
Credits We want to publicly recognize the contribution of Evan Harris from mcpsec.dev for reporting this issue and following the responsible disclosure policy.
Software afectado
Haz clic en una tecnología para ver todas sus vulnerabilidades.
| Plataforma | Paquete | Versiones vulnerables | Corregida en |
|---|---|---|---|
| Python (PyPI) | mcp-neo4j-cypher | >= 0.2.2, < 0.4.0 | 0.4.0 |
Referencias
- https://github.com/neo4j-contrib/mcp-neo4j/security/advisories/GHSA-vcqx-v2mg-7chx
- https://nvd.nist.gov/vuln/detail/CVE-2025-10193
- https://github.com/neo4j-contrib/mcp-neo4j/pull/165
- https://github.com/neo4j-contrib/mcp-neo4j/commit/5b9fbdda6401668d7aa006daf7e644805c067c15
- https://github.com/neo4j-contrib/mcp-neo4j
- https://github.com/neo4j-contrib/mcp-neo4j/releases/tag/mcp-neo4j-cypher-v0.4.0
- https://neo4j.com/security/cve-2025-10193
- https://pypi.org/project/mcp-neo4j-cypher
- https://github.com/advisories/GHSA-vcqx-v2mg-7chx
- Vector CVSS
CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N- Debilidad (CWE)
CWE-346- Plataforma
- Python (PyPI)
- Paquete
mcp-neo4j-cypher- Publicada
- 11.09.2025
- Actualizado
- 11.10.2026 13:19
Fuentes y licencias
OSV / GitHub Advisory Database - PYSEC-2026-1620 - PyPA Advisory Database; CC BY 4.0
OSV / GitHub Advisory Database - GHSA-vcqx-v2mg-7chx - CC BY 4.0
Historial de vulnerabilidades: mcp-neo4j-cypher
Todas las vulnerabilidades publicadas de este paquete (Python (PyPI)), de la más reciente a la más antigua. Muestra si es un fallo aislado o un paquete que hay que vigilar.
- Entradas en total
- 2
- Primera → última
- 09.2025 04.2026
- Sin corrección
- 0
- Explotada en ataques
- 0
Distribución por gravedad
- Alta 1
- Baja 1
Divulgaciones por año
- 2025: 1
- 2026: 1
-
Neo4j Cypher MCP server is vulnerable to DNS rebinding esta entrada
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.