CVE-2026-55615

Name of the Vulnerable Software and Affected Versions Langroid versions prior to 0.65.5

Description Neo4jChatAgent passes LLM-generated Cypher queries directly to the Neo4j driver without validation, a statement-type allowlist, or an opt-out gate. Because the query text can be influenced by prompt injection—either through direct user input or indirect content read via Retrieval-Augmented Generation (RAG)—an attacker can read or destroy all graph data. Additionally, if APOC or dbms.security procedures are enabled on the server, the attacker can achieve OS-command and filesystem access. This issue is a prompt-to-query-language injection. Technical exploitation occurs through the cypher retrieval tool and cypher creation tool, where the cypher query variable is passed to the session.run() and tx.run() functions without proper sanitization.

Recommendations Update to version 0.65.5. Run agents using a least-privilege database role.