CVE-2026-55615 Details
Description
Langroid is a framework for building large-language-model-powered applications. Prior to version 0.65.5, Neo4jChatAgent passes LLM-generated Cypher queries straight to the Neo4j driver with no validation, no statement-type allowlist, and no opt-out gate. The query text is influenceable by prompt injection (direct user input or indirect content the agent reads back via RAG), so an attacker who can influence the prompt can read or destroy all graph data and, when APOC or dbms.security procedures are enabled on the server, achieve OS-command and filesystem access. This is the same defect class and threat model as the SQLChatAgent prompt-to-SQL-to-RCE issue fixed in version 0.63.0 (CVE-2026-25879); that fix did not extend to the neo4j module. Version 0.65.5 contains a fix for the neo4j module.
A vulnerability in Langroid's Neo4jChatAgent prior to version 0.65.5 allows for prompt-injection attacks that can manipulate LLM-generated Cypher queries. These unvalidated queries are sent directly to the Neo4j database driver, enabling an attacker to read or delete all graph data. Furthermore, if certain procedures are enabled on the database, this could lead to unauthorized access to the filesystem, network, or operating system, depending on the configuration. This issue mirrors a similar vulnerability in the SQLChatAgent, which has been addressed in a previous update.
Users can upgrade to Langroid version 0.65.5, which includes a fix for this vulnerability by adding a validation process for Cypher queries and an opt-out gate for dangerous operations. It is recommended to run the agent with a least-privilege database role.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Jul 10, 2026CISA-ADP
Assessed Jul 10, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/langroid/langroid/security/advisories/GHSA-2pq5-3q89-j7cc | CISA-ADP | AdvisoryRemedyVendor |
| https://github.com/langroid/langroid/commit/5a3097d9dd6378b08ced5480b0caf76cc58d00fa | [email protected] | Source CodeVendor |
| https://github.com/langroid/langroid/security/advisories/GHSA-2pq5-3q89-j7cc | [email protected] | AdvisoryRemedyVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-74 | Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| Langroid | <= 0.65.4 (semver) |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 10, 2026 | CVE Modified | CISA-ADP |
| Jul 10, 2026 | New CVE Received | [email protected] |