Threats affecting pkg:npm/@neo4j/graphql

CVE-2026-92681 is a critical vulnerability in @neo4j/graphql versions from 3.23.0 up to 7.6.3. It involves missing authentication enforcement for top-level fields annotated with @cypher when @authentication directives are applied at the schema or type level. This flaw allows unauthenticated users to invoke these fields and execute Cypher statements with the privileges of the GraphQL service account, potentially leading to unauthorized data reading and modification. The issue is fixed in version 7.6.4.

CVE-2026-92682 is an authorization vulnerability in @neo4j/graphql versions 7.0.0 up to but not including 7.6.4. The issue arises because the 'none' quantifier in @authorization filters on relationships and connections is not properly negated when translated to Cypher queries, causing it to behave like 'some'. This flaw allows authenticated users who should be denied access to read, create, or delete sensitive data. The vulnerability is fixed in version 7.6.4.

CVE-2026-19869 is an authorization bypass vulnerability in the neo4j/graphql library affecting versions 5.2.0 through 5.12.14, 6.0.0 through 6.6.4, and 7.0.0 through 7.5.9. The flaw occurs when both type-level and field-level @authentication rules are defined on the same operation type; only the type-level rule is enforced, causing stricter field-level rules to be ignored. This allows users with a valid token meeting the broader type-level requirements but lacking stricter field-level permissions (e.g., admin role) to access restricted fields. No token forgery is involved, but legitimate non-admin tokens can bypass intended restrictions. The vulnerability has a CVSS 4.0 score of 7.6 (high severity).

The @neo4j/graphql library versions prior to 7.5.6 and 5.12.14 have an authentication bypass vulnerability. The library fails to verify the authenticity of a client-supplied, pre-decoded JWT object passed through GraphQL subscription connectionParams. This allows unauthenticated remote clients to forge arbitrary JWT claims and be accepted as authenticated identities, enabling unauthorized access to subscription events restricted to specific roles or users. Versions 6.x are end-of-life and will not receive a fix.