{"data":{"id":"26c6c7cc-561c-4af5-aec6-263a45146486","title":"CVE-2025-67510: Neuron is a PHP framework for creating and orchestrating AI Agents. In versions 2.8.11 and below, the MySQLWriteTool…","summary":"Neuron, a PHP framework for building and orchestrating AI agents, versions 2.8.11 and below, has a flaw in MySQLWriteTool. The tool runs caller-supplied SQL through PDO::prepare() and execute() with no semantic restrictions. In an agent context, prompt injection or indirect prompt manipulation can make the agent run destructive statements such as DROP TABLE, TRUNCATE, DELETE, ALTER, or privilege-related statements, limited by the database user's permissions. Deployments that expose the tool to untrusted input or run it under a broadly privileged database user are affected.","solution":"This issue is fixed in version 2.8.12.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-67510","publishedAt":"2025-12-10T23:15:48.983Z","cveId":"CVE-2025-67510","cweIds":["CWE-250","CWE-284"],"cvssScore":"9.4","cvssSeverity":"critical","severity":"critical","attackType":["prompt_injection"],"issueType":"vulnerability","affectedPackages":["neuron-core/neuron-ai@<= 2.8.11 (fixed: 2.8.12)"],"affectedPackageNames":["neuron-core/neuron-ai"],"affectedPackageRefs":["composer:neuron-core/neuron-ai"],"affectedVendors":[],"affectedVendorsRaw":["Neuron (PHP AI agent framework)","MySQLWriteTool"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Neuron MySQLWriteTool executes arbitrary SQL provided by the caller","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00408,"epssCheckedAt":"2026-11-04T00:12:27.430Z","kevDateAdded":null,"advisoryAliases":["GHSA-898v-775g-777c"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:51:44.347Z","patchAvailable":true,"disclosureDate":null,"fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":"2026-10-29T21:42:19.757Z","capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["integrity","availability","confidentiality"],"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":["AML.T0051"],"fixes":[{"ecosystem":null,"name":"neuron-core/neuron-ai","fixedVersion":"2.8.12","matchedVersion":null,"fixReleasedAt":null,"daysToFix":null,"match":null,"source":null,"status":"ecosystem_unknown","checkedAt":"2026-10-29T21:42:19.607Z"}]}}