Cypher Injection (Neo4j)
Cypher injection occurs when an application constructs a Neo4j Cypher query by concatenating untrusted input. An attacker may alter the query structure to read or modify graph data and, depending on enabled procedures and cloud integrations, reach additional secrets or services.[1][2]
Use parameterized queries for values and allowlist any identifiers or query fragments that cannot be parameterized. The references below contain practical discovery and exploitation examples.[1][2]