CVE-2026-1337
Vulnerability in Neo4j
CVSS score
5.4
EPSS probability
%0.2
Risk score
0.0
Published
8 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
A prompt injection in a code‑review bot that executes AI‑generated fixes in a sandbox. The sandbox uses a blacklist to prevent dangerous commands, but a polyglot payload bypasses the filter and achieves remote code execution.
Makefile Go / Python
Similar Vulnerabilities
8.2
CVE-2026-5423
Subscription Authentication Bypass via Unverified connectionParams.jwt
N
Patch status unknownEPSS %1
6.5
CVE-2024-34517
Vulnerability in Neo4j
N
Patch status unknownEPSS %1
7.6
CVE-2026-19869
Privilege Escalation via Dropped Field-Level @authentication
N
Patch status unknownEPSS %0
9.3
CVE-2026-92681
@neo4j/graphql: schema-level and type-level @authentication not enforced on top-level @cypher fields
N
Patch verifiedEPSS %0
9.8
CVE-2026-1524
Improper authentication in Neo4j
N
Patch status unknownEPSS %0
5.5
CVE-2026-14587
Unathenticated connection can hold Bolt channel open
N
Patch status unknownEPSS %1
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-1337"