Release Date: 11 March 2026

Release Note for Neo4j 5.26.22 (11 March 2026)

Server

  • Resolved a rare concurrency issue that could cause a database to get stuck during a recreate operation when multiple databases were recreated simultaneously.
  • Fixed an issue where configuring multiple auth plugins caused authentication-only providers to incorrectly grant authorization capabilities if at least one other plugin was configured for both.

Cypher

  • Fixed a bug in pipelined runtime where sometimes queries with multiple SelectOrSemiApply operators in the query plan could fail with error messages like: “Cannot invoke org.neo4j.cypher.internal.runtime.pipelined.state.AbstractArgumentStateMap$StateController.peek()” because “controller” is null”.
  • Bug fixes and security updates on components of Neo4j.
  • Including composite namespace in privileges targeting remote alias constituents.

Security

  • Patch jackson to version 2.21.1 to resolve GHSA-72hv-8253-57qq
  Please refer to the changelog for full details of the changes.  

Bundled Packages:

  • labs/apoc-5.26.22
  • lib/neo4j-browser-2026.03.10+2
  • products/bloom-plugin-5.x-2.30.1
  • products/neo4j-genai-plugin-5.26.22
  • products/neo4j-graph-data-science-2.13.8
  • products/neo4j-ops-manager-agent-1.15.0
  • product/fleetManagement-1.1.1