CVE-2025-10193— Neo4j Cypher MCP server is vulnerable to DNS rebinding attacks
Quick assessment
Affected
neo4j neo4j-cypher MCP server
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Neo4j MCP Clients & Servers是Neo4j Contrib开源的一个用于管理大语言模型上下文的协议。 Neo4j MCP Clients & Servers存在安全漏洞，该漏洞源于DNS重绑定漏洞，可能导致绕过同源策略保护并执行未经授权的工具调用。
Possible ATT&CK Techniques 2 AI
T1210 · Exploitation of Remote Services T1557 · Adversary-in-the-Middle
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2025-10193
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Neo4j Cypher MCP server is vulnerable to DNS rebinding attacks
Source: CVE Program / CVE List V5
Vulnerability Description
DNS rebinding vulnerability in Neo4j Cypher MCP server allows malicious websites to bypass Same-Origin Policy protections and execute unauthorised tool invocations against locally running Neo4j MCP instances. The attack relies on the user being enticed to visit a malicious website and spend sufficient time there for DNS rebinding to succeed.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/AU:N/V:D/RE:L/U:Amber
Source: CVE Program / CVE List V5
Vulnerability Type
源验证错误
Source: CVE Program / CVE List V5
Vulnerability Title
Neo4j MCP Clients & Servers 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Neo4j MCP Clients & Servers是Neo4j Contrib开源的一个用于管理大语言模型上下文的协议。 Neo4j MCP Clients & Servers存在安全漏洞，该漏洞源于DNS重绑定漏洞，可能导致绕过同源策略保护并执行未经授权的工具调用。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| neo4j | neo4j-cypher MCP server | 0.2.2 ~ 0.3.1 | - |
|
II. Public POCs for CVE-2025-10193
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-10193
请登录查看更多情报信息。
IV. Related Vulnerabilities
Same vendor: neo4j
-
CVE-2026-19869
Privilege Escalation via Dropped Field-Level @authentication -
CVE-2026-5423
Subscription Authentication Bypass via Unverified connection -
CVE-2026-14587
Unathenticated connection can hold Bolt channel open -
CVE-2026-1471
Caching of authentication context -
CVE-2026-1524
Auth misconfiguration when multiple providers enabled
Same weakness: CWE-346
-
CVE-2026-94485
Next.js: Information disclosure in Next.js App Router metada -
CVE-2026-94486
Next.js: Information disclosure in the Next.js development s -
CVE-2026-103922
Capacitor Android and iOS: remote content can be loaded at t -
CVE-2026-102588
Moodle: csrf in xml grade import -
CVE-2026-102878
mcp-chrome-bridge through 1.0.31 CORS Origin Bypass
V. Comments for CVE-2025-10193
No comments yet