Release Date: 30 October 2025
Release Note for Neo4j 2025.10.1 (30 October 2025)
Security changes
- TLS CBC (cipher block chaining) ciphers, as used in TLS v1.2 network encryption, are no longer available by default. These ciphers have several security vulnerabilities that make them less secure than alternative methods. The Internet Engineering Task Force (IETF) does not recommend using CBC-based ciphers (RFC 8447), and these ciphers were removed from the TLS standard with the development of TLS v1.3. CBC-based ciphers such as TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 are deprecated and have been unsupported since the 2025.01 Neo4j release.Ensure that applications are using supported TLS ciphers before upgrading to the 2025.10 release. For most deployments no changes are required as other ciphers will be used automatically. Manually adding a cipher to the neo4j.conf will override the defaults to allow a wider range of ciphers, including CBC-based ciphers if needed. For example: dbms.ssl.policy.bolt.ciphers=TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 See our documentation for more information.
Cypher
Cypher 25 additive features
- Introduced VECTOR as a new type supported by Cypher, Block store format, and v6 drivers.
- The previous release introduced the ability to format temporal values as strings. In this release, we tackle the other side of the temporals/strings mapping by allowing the construction of temporal values from formatted strings. Temporal value constructors have been extended to take an optional pattern parameter that describes the structure of the incoming temporal string representation.
Cypher errors improvements
- To assist with error identification, query logs in JSON format and cypher-shell now display the query string along with the position marker of where an error occurred. This enhancement is part of the new error framework.
Server
- Infinigraph Preview The October release introduces property sharding as a preview feature. The preview feature is intended only for testing and development purposes. Property sharding enables the implementation of an Infinigraph architecture allowing the creation of distributed graphs across multiple machines. It provides independent scaling of property data, enabling the handling of larger volumes of properties without impacting the graph topology performance.A sharded property database maintains ACID guarantees for write transactions and full Cypher query support. For details, see the Operations Manual -> Scalability section.
- Java 25 versioned JREs (JDK) are now supported for the platform. See our documentation for more details.
- Introduce a deny list setting server.metrics.deny_filter, which overrides metrics requested in server.metrics.filter. See our documentation for more details.
- Insecure CBC ciphers are removed from defaults in all TLS configurations. For details, see the Operations manual -> SSL framework.
Neo4j-admin
- The backup command now includes a new parameter to filter metadata by user IDs. This enhancement enables the backup of metadata to be restricted to specific users, rather than applying to all users. For example, you can use include-metadata=users=user1,user2 to specify the users that should be included in the metadata script. See the Operations manual -> Changes, deprecations, and removals for more details.
Bug fixes
Cypher
- Allow using null as a default procedure parameter value for all non-primitive types.
- Fixes a bug where the values in the options maps of CREATE INDEX and CONSTRAINTS, CREATE DATABASE, ALTER DATABASE commands could become transposed.
Server
- Fixes a rare issue where malformed tokens (empty string or containing null bytes) could bypass validation and cause database panic.
- Avoid stack overflow when sorting free IDs for a big value store.
Deprecations
- The following Operating Systems are deprecated. They will continue to be supported along with the next Neo4j Long-Term Support (LTS) release in 2026, but new releases after the 2026 LTS will no longer support these platforms. We recommend planning an upgrade to a newer Operating System in the meantime.
- Red Hat Enterprise Linux 8.x
- Debian 11.x
- Windows Server 2022
- MacOS 13 Ventura
- MacOS 14 Sonoma
Bundled products
The following products have been included in the distribution – available in /products directory unless stated otherwise – and are fully compatible with this release.- APOC Core 2025.10.1 – The most popular community library developed for the database, is fully supported (included in Labs directory).
- Bloom 6.x-2.26.0 – A beautiful and expressive data visualization tool to quickly explore and interact with Neo4j’s graph data platform – no coding required. Please refer to the release notes for details. (Requires a License)
- Browser 2025.10.24+0 – Neo4j Browser is a tool for developers to interact with the graph. It is the default interface for both Enterprise and Community Editions (included in the /libs directory) of the Neo4j database.
- Neo4j GenAI Plugin 2025.10.1 -The GenAI plugin delivers integrations with various generative AI services, including support for transforming text data into vector embeddings using VertexAI, OpenAI, or Amazon Bedrock. The resulting vector embeddings can be used together with Neo4j’s vector search indexes.
- Neo4j Graph Data Science 2.23.0 is a compatible version of the connected data analytics and machine learning platform that helps you understand the connections in big data to answer critical questions and improve predictions. Please refer to the release notes for further details. (GDS Enterprise requires a License. )
- Enterprise Fleet Management 1.1.0 allows a self-managed deployment to be registered within the Aura console, providing a fleet-wide view of all Neo4j instances. It supports EE and CE deployments.
- Neo4j Ops Manager 1.13.1 is a UI-based tool that enables Administrators to operate and observe all of their Neo4j Database Management Servers. Now includes support for Neo4j’s any-to-any upgrade. Please refer to the release notes for details. (Included in Enterprise).