Threats tagged 'bit-neo4j-2026-1471'

CVE-2026-1471 is an authorization vulnerability in Neo4j Enterprise edition prior to version 2026.01.4. It arises from excessive caching of authentication context in certain non-default Single Sign-On (SSO) configurations using the UserInfo endpoint. Authenticated users may inherit the authentication context of the first user who logged in after a server restart, potentially allowing unauthorized access to resources. The issue affects versions 2025.01 and 4.4.0 and requires user interaction and some privileges to exploit. The vulnerability has a low CVSS score (2.