CVE-2025-67510: Neuron MySQLWriteTool executes arbitrary SQL provided by the caller

Summary

Neuron, a PHP framework for building and orchestrating AI agents, versions 2.8.11 and below, has a flaw in MySQLWriteTool. The tool runs caller-supplied SQL through PDO::prepare() and execute() with no semantic restrictions. In an agent context, prompt injection or indirect prompt manipulation can make the agent run destructive statements such as DROP TABLE, TRUNCATE, DELETE, ALTER, or privilege-related statements, limited by the database user's permissions. Deployments that expose the tool to untrusted input or run it under a broadly privileged database user are affected.

Mitigation

This issue is fixed in version 2.8.12.

Topics

• AI agents

Related items

• InfoTop agent skill security resources — November 2026Similar attack · Adversa AI Blog
• InfoHow to Turn AI Red Team Findings Into Runtime ControlsSimilar attack · Straiker Blog
• MediumDocker Sandboxes vulnerability lets AI agents access sensitive files outside their sandbox (CVE-2026-103916) | Endor LabsSimilar attack · Endor Labs Blog
• MediumFree the Model, Sell the Gateway: Prompt Adware hidden in Jailbreak BundlesSimilar attack · Check Point Research
• InfoRight Tool, Wrong Parameters: Defending LLM Agents Against Parameter PoisoningSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)