CVE-2025-10193
Neo4j Cypher MCP server is vulnerable to DNS rebinding attacks
- Published
- Updated
- Reserved
- Assigned by
- Neo4j
Description
DNS rebinding vulnerability in Neo4j Cypher MCP server allows malicious websites to bypass Same-Origin Policy protections and execute unauthorised tool invocations against locally running Neo4j MCP instances. The attack relies on the user being enticed to visit a malicious website and spend sufficient time there for DNS rebinding to succeed.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| Neo4jCNA (assigner) | 4.0 | High7.4 | CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/AU:N/V:D/RE:L/U:Amber |
| NVDNVD · Deferred | 4.0 | High7.4 | CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:X/V:D/RE:L/U:Amber |
- EPSS (exploitation in 30 days)
- 0.22% · top 87% of all CVEs (6 Nov 2026)
- CISA SSVC
- Exploitation: none · Automatable: no · Technical impact: total
The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.4.
Weakness
Affected products
neo4j · neo4j-cypher MCP server
- affected 0.2.2 – ≤ 0.3.1
Affected packages
From reviewed advisories of the GitHub Advisory Database.
- PyPImcp-neo4j-cypherGHSA-vcqx-v2mg-7chx (opens in a new tab)
What to do
Solution: This issue is fixed in v0.4.0 and all later versions.
Workaround: Use stdio mode if you cannot upgrade to v0.4.0 and above.
References (3)
- https://neo4j.com/security/cve-2025-10193 (opens in a new tab)vendor-advisory
- https://github.com/neo4j-contrib/mcp-neo4j/security/advisories/GHSA-vcqx-v2mg-7chx (opens in a new tab)third-party-advisory
- https://github.com/neo4j-contrib/mcp-neo4j/releases/tag/mcp-neo4j-cypher-v0.4.0 (opens in a new tab)release-notes
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisory GHSA-vcqx-v2mg-7chx (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2025-10193)Record last updated .