CVE-2025-67510

Neuron is a PHP framework for creating and orchestrating AI Agents. In versions 2.8.11 and below, the MySQLWriteTool executes arbitrary SQL provided by the caller using PDO::prepare() + execute() without semantic restrictions. This is consistent with the name (“write tool”), but in an LLM/agent context it becomes a high-risk capability: prompt injection or indirect prompt manipulation can cause execution of destructive queries such as DROP TABLE, TRUNCATE, DELETE, ALTER, or privilege-related statements (subject to DB permissions). Deployments that expose an agent with MySQLWriteTool enabled to untrusted input and/or run the tool with a DB user that has broad privileges are impacted. This issue is fixed in version 2.8.12.

• CWE-250
• CWE-284

• https://github.com/neuron-core/neuron-ai/commit/44bab85d92bf162898ee48d0bcef6ba0d29b59c9Patch
• https://github.com/neuron-core/neuron-ai/releases/tag/2.8.12Product, Release Notes
• https://github.com/neuron-core/neuron-ai/security/advisories/GHSA-898v-775g-777cMitigation, Vendor Advisory

Published

Dec 10, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-67505Okta Java Management SDK facilitates interactions with the O…8.4
• CVE-2025-67506PipesHub is a fully extensible workplace AI platform for ent…9.8
• CVE-2025-67507Filament is a collection of full-stack components for accele…8.1
• CVE-2025-67508gardenctl is a command-line client for the Gardener which co…8.4
• CVE-2025-67509Neuron is a PHP framework for creating and orchestrating AI …8.2
• CVE-2025-6751A vulnerability, which was classified as critical, was found…8.8
• CVE-2025-67511Cybersecurity AI (CAI) is an open-source framework for build…9.6
• CVE-2025-67512Rejected reason: The vulnerability is dependency-based.
• CVE-2025-67513FreePBX Endpoint Manager is a module for managing telephony …6.9
• CVE-2025-67514Rejected reason: Vulnerability is dependency-based.
• CVE-2025-67515Improper Control of Filename for Include/Require Statement i…8.8
• CVE-2025-67516Improper Neutralization of Special Elements used in an SQL C…8.5