CVE-2026-1471Disclosure(neo4j / neo4j)

LOWCVSS 6.5 · MEDIUM

Signal is active with 2 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Excessive caching of authentication context in Neo4j Enterprise edition versions prior to 2026.01.4 leads to authenticated users inheriting the context of the first user who authenticated after restart. The issue is limited to certain non-default configurations of SSO (UserInfo endpoint). We recommend upgrading to versions 2026.01.4 (or 5.26.22) where the issue is fixed.

neo4j CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://neo4j.com/security/CVE-2026-1471

Weakness type (CWE)

CWE-863

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

neo4j

Threat summary

2 mentions across 1 observed day

What's happening

Technical details provided in 2 signals
Disclosure: 2 classified signals
2 total mentions across 1 day

Affected systems

Vendors

neo4j

Products

neo4j

Deep dive

Activity timeline2 mentions / 1d

Signal classification1 categories

Disclosure

2100.0%

Referenced assets2 URLs

By indicator

Full discourse2 posts

Infoflowcloud@infoflowcloud209d
Disclosure
🚨*CVE* CVE-2026-1471 Excessive caching of authentication context in Neo4j Enterprise edition versions prior to 2026.01.4 leads to authenticated users inheriting the context of the first use… https://www.cve.org/CVERecord?id=CVE-2026-1471 ----- Traducción: CVE-2026-1471 El … http://infoflow.cloud`
Post summary
The post announces CVE-2026-1471, a caching flaw in Neo4j Enterprise that may expose authentication contexts to other users, but it does not discuss exploitation, fixes, or proof-of-concept details.
0000030
57 followersView on X
CVE@CVEnew209d
Disclosure
CVE-2026-1471 Excessive caching of authentication context in Neo4j Enterprise edition versions prior to 2026.01.4 leads to authenticated users inheriting the context of the first use… https://www.cve.org/CVERecord?id=CVE-2026-1471
Post summary
The tweet announces CVE‑2026‑1471, describing its context‑inheritance flaw in Neo4j Enterprise and linking to the official CVE record.
00000382
56.7K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	neo4j	neo4j	-	-	-

Explore more

Back to dashboard neo4j CVEs neo4j vulnerabilities