Read the docs
TI-2024-22827 Aliases CVE-2024-34517GHSA-p343-9qwp-pqxv

Improper privilege management in Neo4j

Priority LOW 32CWE-471Published · Updated

Key facts

Attack vector
Network
Privileges required
High
User interaction
None
Attack complexity
Low
Impact type
Privilege escalation
Confidentiality · integrity · availability
High · High · None
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA and GitHub. Impact type from CWE-269.

Summary

The Cypher component in Neo4j 5.0.0 through 5.18 mishandles IMMUTABLE privileges in some situations where an attacker already has admin access.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00631 50th percentileScored 2026-11-07
Fix Fixed Neo4j (Neo4j): 5.19org.neo4j:neo4j-cypher (Maven): 5.19.0

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
neo4jNeo4j5.0.0 to before 5.195.19Patch availableCNA
—org.neo4j:neo4j-cypher (Maven)5.0.0 to before 5.19.05.19.0Patch availableGHSA-p343-9qwp-pqxv
  • Neo4j Vendorneo4j Affected 5.0.0 to before 5.19 Fixed in 5.19 Patch available CNA
  • org.neo4j:neo4j-cypher (Maven) Vendor— Affected 5.0.0 to before 5.19.0 Fixed in 5.19.0 Patch available GHSA-p343-9qwp-pqxv

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:neo4j:neo4j:*:*:*:*:community:*:*:*5.0.0 to before 5.19.0Vulnerableneo4j
  • cpe:2.3:a:neo4j:neo4j:*:*:*:*:community:*:*:* Versions 5.0.0 to before 5.19.0 Vulnerable ·neo4j

Remediation

  • Fix · CNA Neo4j (Neo4j) Fixed in 5.19
  • Fix · GHSA-p343-9qwp-pqxv org.neo4j:neo4j-cypher (Maven) Fixed in 5.19.0 Advisory →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2024-34517
  2. 2026-10-03 Alias added: GHSA-p343-9qwp-pqxv
  3. 2026-10-27 EPSS moved to the 50th–90th percentile

References

Advisory 3

Other 4

  • TI-2021-13406 Neo4j through 3.4.18 (with the shell server enabled) exposes an RMI service that… CVSS 3.1CRITICAL 9.8
  • TI-2018-13005 Due to incorrect access control in Neo4j Enterprise Database Server 3.4.x before 3.4.9… CVSS 3.0CRITICAL 9.8
  • TI-2026-01049 Insufficient escaping of unicode characters in query log CVSS 4.0LOW 1.1
  • TI-2013-05927 Multiple cross-site request forgery (CSRF) vulnerabilities in Neo4J 1.9.2 allow remote… CVSS 2.0MEDIUM 6.8
  • TI-2026-12296 Unathenticated connection can hold Bolt channel open CVSS 4.0MEDIUM 5.5
  • TI-2026-01192 Incorrect privilege assignment in composite databases CVSS 4.0LOW 2.0
See all 8 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences