CVE-2025-10193 – Neo4j Cypher MCP server is vulnerable to DNS rebinding attacks

CVE ID : CVE-2025-10193

Published : Sept. 11, 2025, 2:15 p.m. | 25 minutes ago

Description : DNS rebinding vulnerability in Neo4j Cypher MCP server allows malicious websites to bypass Same-Origin Policy protections and execute unauthorised tool invocations against locally running Neo4j MCP instances. The attack relies on the user being enticed to visit a malicious website and spend sufficient time there for DNS rebinding to succeed.

Severity: 7.4 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…