CVE-2026-55615

Affected versions of the Langroid package are vulnerable to Command Injection due to the execution of LLM-generated Cypher queries without validation. The `Neo4jChatAgent` component passes user-influenced Cypher queries directly to the Neo4j driver through methods like `read_query` and `write_query`, without implementing any validation or statement-type restrictions. An attacker can exploit this vulnerability by manipulating the prompt to execute arbitrary Cypher commands, potentially leading to unauthorized data access, data destruction, and, when certain configurations are enabled, remote code execution.