Description
Insufficient escaping of unicode characters in query log in Neo4j Enterprise and Community editions prior to 2026.01 can lead to XSS if the user opens the logs in a tool that treats them as HTML. There is no security impact on Neo4j products, but this advisory is released as a precaution to treat the logs as plain text if using versions prior to 2026.01.
Proof of concept exploit: https://github.com/JoakimBulow/CVE-2026-1337
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| neo4j | Enterprise Edition | < 2026.01.0 | 2026.01.0 |
| neo4j | Community Edition | < 2026.01.0 | 2026.01.0 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Wolfi
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Wolfi rolling | neo4j-2025.10 | No fix yet | — |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
GitHub 3 repositories
-
JoakimBulow/CVE-2026-1337 ★ 6 · Feb 5, 2026
CVE-2026-1337 - Neo4j - Log Injection
-
George0Papasotiriou/CVE-2026-1337-AI-Coding-Assistant-Prompt-Injection-to-Sandbox-Escape ★ 1 · Aug 3, 2026
A prompt injection in a code‑review bot that executes AI‑generated fixes in a sandbox. The sandbox uses a blacklist to prevent dangerous commands, but a polyglot payload bypasses the filter and achie…
-
primatelab/bash2shell ★ 0 · Oct 30, 2026
Joke CVE advisory for Bash2Shell (CVE-2026-1337).
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | org.neo4j:neo4j | < 2026.01 | 2026.01 | GHSA-xr72-g735-4vwp |