Threats Tagged 'cve-2026-55615'
View all threats tagged with 'cve-2026-55615'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-55615'
Click on any threat for detailed analysis and mitigation recommendations
GHSA-2pq5-3q89-j7cc: Langroid: Neo4jChatAgent executes LLM-generated Cypher without validation (prompt-to-Cypher injection; config-conditional RCE), mirroring the SQLChatAgent bug fixed in CVE-2026-25879CVE-2026-55615 0 Langroid's Neo4jChatAgent executes Cypher queries generated by large language models (LLMs) without validation or allowlisting, allowing prompt injection attacks. An attacker able to influence the prompt can execute arbitrary Cypher queries, leading to unauthorized read, write, and deletion of graph data. If APOC or dbms.security procedures are enabled, this can escalate to remote code execution (RCE) and filesystem access. This vulnerability mirrors a previously fixed SQL injection issue in the same project but remains unpatched for the Neo4j module. Versions of Langroid prior to 0.65.5 are affected. Join the discussion | GCVE Database | 07/06/2026, 21:22:43 UTC Added: 07/06/2026, 23:02:23 UTC |
Showing 1 to 1 of 1 result