Approved changes feed: RSS · Atom

cpe:2.3:a:neo4j:neo4j-cypher_mcp_server:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorNeo4J (087e8666-bd16-531b-a554-5f5140392be5)
ProductNeo4J Cypher Mcp Server (6579b101-f5ee-5f11-b86e-551e4a2d7e02)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-10193 vulnerable 2026-06-08 07:02:26.428267 Neo4j Cypher MCP server is vulnerable to DNS rebinding attacks
DNS rebinding vulnerability in Neo4j Cypher MCP server allows malicious websites to bypass Same-Origin Policy protections and execute unauthorised tool invocations against locally running Neo4j MCP instances. The attack relies on the user being enticed to visit a malicious website and spend sufficient time there for DNS rebinding to succeed.
Published: 2025-09-11T14:05:30.592Z
Updated: 2026-02-26T17:48:41.293Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.