Vulnerability · Published Mar 11, 2026 · Assigned by Neo4j

CVE-2026-1471Caching of authentication context

Low 2.1

In plain English

A low-severity incorrect authorization in Enterprise edition from Neo4j. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 21% of all known vulnerabilities).

Severity (CVSS 4.0)2.1Low

Exploit odds (30 days)0.3%top 79.1% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

Excessive caching of authentication context in Neo4j Enterprise edition versions prior to 2026.01.4 leads to authenticated users inheriting the context of the first user who authenticated after restart. The issue is limited to certain non-default configurations of SSO (UserInfo endpoint). We recommend upgrading to versions 2026.01.4 (or 5.26.22) where the issue is fixed.

Affected products (as reported)

Vendor	Product	Versions
Neo4j	Enterprise edition	2025.01 – before 2026.01.44.4.0 – before 5.26.22

Weakness: CWE-863 · Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/AU:N/R:U/V:D/RE:L/U:Clear

References

https://neo4j.com/security/CVE-2026-1471 vendor-advisory