{"data":{"id":"5a5bff0e-b378-46bd-ad79-6bb08e1497e8","title":"CVE-2025-67509: Neuron is a PHP framework for creating and orchestrating AI Agents. Versions 2.8.11 and below use MySQLSelectTool…","summary":"Neuron, a PHP framework for building AI agents, has a read-only bypass in MySQLSelectTool in versions 2.8.11 and below. The tool validates queries by checking the first keyword and a forbidden-keyword list, which does not block file-writing constructs such as INTO OUTFILE and INTO DUMPFILE. An attacker who can influence the tool input, for example through prompt injection on a public agent endpoint, can write arbitrary files to the database server if the MySQL or MariaDB account has the FILE privilege and the server configuration permits writes to a useful location, such as a web-accessible directory.","solution":"Fixed in 2.8.12.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-67509","publishedAt":"2025-12-10T23:15:48.823Z","cveId":"CVE-2025-67509","cweIds":["CWE-94"],"cvssScore":"8.2","cvssSeverity":"high","severity":"high","attackType":["prompt_injection","other"],"issueType":"vulnerability","affectedPackages":["neuron-core/neuron-ai@<= 2.8.11 (fixed: 2.8.12)"],"affectedPackageNames":["neuron-core/neuron-ai"],"affectedPackageRefs":["composer:neuron-core/neuron-ai"],"affectedVendors":[],"affectedVendorsRaw":["Neuron (PHP AI agent framework)","MySQLSelectTool"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Neuron MySQLSelectTool read-only bypass allows file writes via INTO OUTFILE","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00289,"epssCheckedAt":"2026-11-04T06:10:15.237Z","kevDateAdded":null,"advisoryAliases":["GHSA-j8g6-5gqc-mq36"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:51:44.848Z","patchAvailable":true,"disclosureDate":null,"fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":"2026-10-29T21:42:20.535Z","capecIds":["CAPEC-242"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["integrity","confidentiality"],"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":["AML.T0051"],"fixes":[{"ecosystem":null,"name":"neuron-core/neuron-ai","fixedVersion":"2.8.12","matchedVersion":null,"fixReleasedAt":null,"daysToFix":null,"match":null,"source":null,"status":"ecosystem_unknown","checkedAt":"2026-10-29T21:42:20.385Z"}]}}