CVE-2025-67509: Neuron MySQLSelectTool read-only bypass allows file writes via INTO OUTFILE

Summary

Neuron, a PHP framework for building AI agents, has a read-only bypass in MySQLSelectTool in versions 2.8.11 and below. The tool validates queries by checking the first keyword and a forbidden-keyword list, which does not block file-writing constructs such as INTO OUTFILE and INTO DUMPFILE. An attacker who can influence the tool input, for example through prompt injection on a public agent endpoint, can write arbitrary files to the database server if the MySQL or MariaDB account has the FILE privilege and the server configuration permits writes to a useful location, such as a web-accessible directory.

Mitigation

Fixed in 2.8.12.

Topics

• AI agents

Related items

• MediumCVE-2026-121936: easyVoice server-side request forgery through openaiBaseUrl in /api/v1/ttsSimilar attack · NVD/CVE Database
• InfoTop agent skill security resources — November 2026Similar attack · Adversa AI Blog
• InfoHow to Turn AI Red Team Findings Into Runtime ControlsSimilar attack · Straiker Blog
• MediumCVE-2026-118628: MLflow get-artifacts server-side request forgery information disclosureSimilar attack · NVD/CVE Database
• HighCVE-2026-118625: MLflow Tracking Server privilege escalation via get_endpointsSimilar attack · NVD/CVE Database