Information disclosure in Neo4j Community Edition
CVE-2026-1622
Neo4j Enterprise and Community editions versions prior to 2026.01.3 and 5.26.21 are vulnerable to a potential information disclosure by a user who has ability to access the local log files. The "obfuscate_literals" option in the query lo…
EPSS: 0.001 (4.1th percentile) — read the EPSS interpretation.
Affected products
- Neo4j Community Edition — versions 2025.01, 5.0, 4.4
- Neo4j Enterprise Edition — versions 2025.01, 5.0, 4.4
Weakness classification (CWE)
References
- 3b236295-4ccd-4a1f-a1c1-a72eecc8d7b6 (vendor-advisory)