Release Date: 21 November 2025
Release Note for Neo4j 5.26.17 (21 November 2025)
- Backup now deletes the downloaded store file after packaging it into a backup artefact, gradually freeing up space.
- Fix to avoid potential issues in backup/dump commands when the target location is a cloud object store and the object to store exceeds 8GB.
- Fixes bug in neo4j-admin database dump, where if the flag –overwrite-destination was used, the command could, under some circumstances, produce a corrupt dump file. This dump file would fail to be loaded by the neo4j-admin database load command with the error “Unknown frame descriptor.”
- Patch Jersey to 2.46 to resolve CVE-2025-12383.
- Fixes CVE-2025-12738 by blocking users from setting a property to the existing value if they don’t have permission.
- Bump google-cloud-storage 2.43.2 -> 2.60.0 to mitigate CVE-2025-55163.
Bundled Packages:
- labs/apoc-5.26.17
- lib/neo4j-browser-2025.11.20+0
- products/bloom-plugin-5.x-2.27.0
- products/neo4j-genai-plugin-5.26.17
- products/neo4j-graph-data-science-2.13.7
- products/neo4j-ops-manager-agent-1.13.2
- product/fleetManagement-1.1.0