DNS rebinding vulnerability in Neo4j Cypher MCP server allows malicious websites to bypass Same-Origin Policy protections and execute unauthorised tool invocations against local...
Date: 2025-09
Attack vector: other
Category: vulnerability-disclosure
Severity: Medium
CVE: CVE-2025-10193
CWE: CWE-346

DNS rebinding vulnerability in Neo4j Cypher MCP server allows malicious websites to bypass Same-Origin Policy protections and execute unauthorised tool invocations against locally running Neo4j MCP instances. The attack relies on the user being enticed to visit a malicious website and spend sufficient time there for DNS rebinding to succeed.


Mitigations:

Architectural layers (MAESTRO):