Medium severity · published Mar 11, 2026
CVE-2026-1471
Caching of authentication context
6.5
CVSS
0.3%
EPSS
No
On KEV
Description
Excessive caching of authentication context in Neo4j Enterprise edition versions prior to 2026.01.4 leads to authenticated users inheriting the context of the first user who authenticated after restart. The issue is limited to certain non-default configurations of SSO (UserInfo endpoint).
We recommend upgrading to versions 2026.01.4 (or 5.26.22) where the issue is fixed.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 18% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EE
Enterprise edition · Neo4j
2025.01 before 2026.01.4; 4.4.0 before 5.26.22 · source: vendor
NE
Neo4j · Neo4j
before 5.26.22; 2025.01.0 before 2026.01.4 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-1471
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-1471
Vendor Advisory
https://neo4j.com/security/CVE-2026-1471
More from Enterprise edition
9.8
CVE-2026-1524
Auth misconfiguration when multiple providers enabled
7.5
CVE-2026-14587
Unathenticated connection can hold Bolt channel open
7.2
CVE-2026-1497
Incorrect privilege assignment in composite databases
6.3
CVE-2025-11602
Untargeted information leak in Bolt protocol handshake
5.4
CVE-2026-1337
Insufficient escaping of unicode characters in query log