CVE Explorer
CVE-2025-67509
Neuron is a PHP framework for creating and orchestrating AI Agents. Versions 2.8.11 and below use MySQLSelectTool, which is vulnerable to Read-Only Bypass. MySQLSelectTool is intended to be a read-only SQL tool (e.g., for LLM agent querying, however, validation based on the first keyword (e.g., SELECT) and a forbidden-keyword list does not block file-writing constructs such as INTO OUTFILE / INTO DUMPFILE. As a result, an attacker who can influence the tool input (e.g., via prompt injection thr
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
0
Affected products and versions
1 source assertion{"product":"neuron-ai","vendor":"neuron-core","versions":[{"status":"affected","version":"< 2.8.12"}]}
- cve_program_cvelist_v5affectedurn:baitaphish:normalized-source-record:v2:c9b4def45e045bd3145e3ba7512764493fa43b85db7885fef40bb77e92b24d54 · sha256:4de8b25dcf0764ae… · /containers/cna/affected/0
Provider-owned CVSS observations
1 source assertion{"metric":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":8.2,"baseSeverity":"HIGH","confidentialityImpact":"LOW","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N","version":"3.1"},"metric_type":"cvssV3_1"}
- cve_program_cvelist_v5cvssurn:baitaphish:normalized-source-record:v2:c9b4def45e045bd3145e3ba7512764493fa43b85db7885fef40bb77e92b24d54 · sha256:4de8b25dcf0764ae… · /containers/cna/metrics/0/cvssV3_1
CWE assertions
1 source assertion{"cweId":"CWE-94","description":"CWE-94: Improper Control of Generation of Code ('Code Injection')","lang":"en","type":"CWE"}
- cve_program_cvelist_v5cweurn:baitaphish:normalized-source-record:v2:c9b4def45e045bd3145e3ba7512764493fa43b85db7885fef40bb77e92b24d54 · sha256:4de8b25dcf0764ae… · /containers/cna/problemTypes/0/descriptions/0
Source references
3 source assertions{"name":"https://github.com/neuron-core/neuron-ai/commit/72735d0ea133266cf2f5d5d195d41e9dd865289a","tags":["x_refsource_MISC"],"url":"https://github.com/neuron-core/neuron-ai/commit/72735d0ea133266cf2f5d5d195d41e9dd865289a"}
- cve_program_cvelist_v5referenceurn:baitaphish:normalized-source-record:v2:c9b4def45e045bd3145e3ba7512764493fa43b85db7885fef40bb77e92b24d54 · sha256:4de8b25dcf0764ae… · /containers/cna/references/1
{"name":"https://github.com/neuron-core/neuron-ai/releases/tag/2.8.12","tags":["x_refsource_MISC"],"url":"https://github.com/neuron-core/neuron-ai/releases/tag/2.8.12"}
- cve_program_cvelist_v5referenceurn:baitaphish:normalized-source-record:v2:c9b4def45e045bd3145e3ba7512764493fa43b85db7885fef40bb77e92b24d54 · sha256:4de8b25dcf0764ae… · /containers/cna/references/2
{"name":"https://github.com/neuron-core/neuron-ai/security/advisories/GHSA-j8g6-5gqc-mq36","tags":["x_refsource_CONFIRM"],"url":"https://github.com/neuron-core/neuron-ai/security/advisories/GHSA-j8g6-5gqc-mq36"}
- cve_program_cvelist_v5referenceurn:baitaphish:normalized-source-record:v2:c9b4def45e045bd3145e3ba7512764493fa43b85db7885fef40bb77e92b24d54 · sha256:4de8b25dcf0764ae… · /containers/cna/references/0
Attribution and limitations
- CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →
Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.