Ghostwire
Home / Vulnerabilities / CVE-2026-55615

CVE-2026-55615: Langroid: Neo4jChatAgent executes LLM-generated Cypher without validation (prompt-to-Cypher injection;...

CRITICAL CVSS 0.0 Exploit Available

Published: July 6, 2026 | Last Modified: July 6, 2026

Description

Langroid: Neo4jChatAgent executes LLM-generated Cypher without validation (prompt-to-Cypher injection; config-conditional RCE), mirroring the SQLChatAgent bug fixed in CVE-2026-25879

Ghostwire Analysis — What This Means Practically

This analysis is generated by Ghostwire from NVD, CISA KEV, EPSS, and open-source intelligence data. Verify findings through primary sources before acting.

Security Coverage (1 articles)

Tenable CVEs
CVE-2026-55615

References