CVE-2025-67509

Neuron is a PHP framework for creating and orchestrating AI Agents. Versions 2.8.11 and below use MySQLSelectTool, which is vulnerable to Read-Only Bypass. MySQLSelectTool is intended to be a read-only SQL tool (e.g., for LLM agent querying, however, validation based on the first keyword (e.g., SELECT) and a forbidden-keyword list does not block file-writing constructs such as INTO OUTFILE / INTO DUMPFILE. As a result, an attacker who can influence the tool input (e.g., via prompt injection through a public agent endpoint) may write arbitrary files to the DB server if the MySQL/MariaDB account has the FILE privilege and server configuration permits writes to a useful location (e.g., a web-accessible directory). This issue is fixed in version 2.8.12.

• CWE-94

• https://github.com/neuron-core/neuron-ai/commit/72735d0ea133266cf2f5d5d195d41e9dd865289aPatch
• https://github.com/neuron-core/neuron-ai/releases/tag/2.8.12Product, Release Notes
• https://github.com/neuron-core/neuron-ai/security/advisories/GHSA-j8g6-5gqc-mq36Mitigation, Vendor Advisory

Published

Dec 10, 2025

Last Modified

Sep 25, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-67503Rejected reason: This CVE is a duplicate of another CVE.
• CVE-2025-67504WBCE CMS is a content management system. Versions 1.6.4 and …9.8
• CVE-2025-67505Okta Java Management SDK facilitates interactions with the O…8.4
• CVE-2025-67506PipesHub is a fully extensible workplace AI platform for ent…9.8
• CVE-2025-67507Filament is a collection of full-stack components for accele…8.1
• CVE-2025-67508gardenctl is a command-line client for the Gardener which co…8.4
• CVE-2025-6751A vulnerability, which was classified as critical, was found…8.8
• CVE-2025-67510Neuron is a PHP framework for creating and orchestrating AI …9.4
• CVE-2025-67511Cybersecurity AI (CAI) is an open-source framework for build…9.6
• CVE-2025-67512Rejected reason: The vulnerability is dependency-based.
• CVE-2025-67513FreePBX Endpoint Manager is a module for managing telephony …6.9
• CVE-2025-67514Rejected reason: Vulnerability is dependency-based.