CVE-2025-10193 - CVE House
Back to Database
Status published High CVE-2025-10193

Neo4j Cypher MCP server is vulnerable to DNS rebinding attacks

Vulnerability Description

DNS rebinding vulnerability in Neo4j Cypher MCP server allows malicious websites to bypass Same-Origin Policy protections and execute unauthorised tool invocations against locally running Neo4j MCP instances. The attack relies on the user being enticed to visit a malicious website and spend sufficient time there for DNS rebinding to succeed.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-10193

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • Evan Harris

References

More from neo4j

View All →
CVE-2025-12738
Enumeration of restricted property value
Low 1.3
CVE-2025-11602
Untargeted information leak in Bolt protocol handshake
Medium 6.3
CVE-2023-23926
APOC (Awesome Procedures on Cypher) is an add-on library for...
Medium 5.9
CVE-2022-37423
Neo4j APOC (Awesome Procedures on Cypher) before 4.3.0.7 and 4.x...
High 7.5
CVE-2021-42767
A directory traversal vulnerability in the apoc plugins in Neo4J...
Critical 9.1

Affected Vendor

Affected Software

neo4j-cypher MCP server
Vulnerable Versions:
0.2.2

Timeline

Official Publish: September 11th, 2025
Last Modified: February 26th, 2026
Added to House: July 22nd, 2026

CVSS Vectors

Weaknesses (CWE)

CWE-346

MITRE ATT&CK TTPs

T1189 Drive-by Compromise
Initial Access
T1190 Exploit Public-Facing Application
Initial Access
T1078 Valid Accounts
Persistence
T1565.002 Stored Data Manipulation
Impact