CVE-2025-10193CWE-346

Neo4j Cypher MCP server is vulnerable to DNS rebinding attacks

High · published September 11, 2025

CVSS v4.0
7.4
EPSS
0%
Percentile
11.9
In the wild
Unconfirmed
What it is

DNS rebinding vulnerability in Neo4j Cypher MCP server allows malicious websites to bypass Same-Origin Policy protections and execute unauthorised tool invocations against locally running Neo4j MCP instances. The attack relies on the user being enticed to visit a malicious website and spend sufficient time there for DNS rebinding to succeed.

The record
Technical detail
CVSS v4.0
7.4 · HIGH
Vector
CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/AU:N/V:D/RE:L/U:Amber
EPSS
0.00221 · 11.9th percentile
Weakness
CWE-346 · Origin Validation Error
Published
2025-09-11T14:05Z
EPSS history
Timeline
  • 11 SEP 14:05Z
    Neo4j Cypher MCP server is vulnerable to DNS rebinding attacks
    cvelistv5