Description
Neuron is a PHP framework for creating and orchestrating AI Agents. In versions 2.8.11 and below, the MySQLWriteTool executes arbitrary SQL provided by the caller using PDO::prepare() + execute() without semantic restrictions. This is consistent with the name (“write tool”), but in an LLM/agent context it becomes a high-risk capability: prompt injection or indirect prompt manipulation can cause execution of destructive queries such as DROP TABLE, TRUNCATE, DELETE, ALTER, or privilege-related statements (subject to DB permissions). Deployments that expose an agent with MySQLWriteTool enabled to untrusted input and/or run the tool with a DB user that has broad privileges are impacted. This issue is fixed in version 2.8.12.
Published: 2025-12-10
Score: 9.4 Critical
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
Github GHSA Github GHSA GHSA-898v-775g-777c Neuron MySQLWriteTool allows arbitrary/destructive SQL when exposed to untrusted prompts (agent “footgun”)
History

Fri, 06 Mar 2026 19:30:00 +0000

Type Values Removed Values Added
First Time appeared Neuron-ai
Neuron-ai neuron
CPEs cpe:2.3:a:neuron-ai:neuron:*:*:*:*:*:*:*:*
Vendors & Products Neuron-ai
Neuron-ai neuron

Thu, 11 Dec 2025 21:45:00 +0000

Type Values Removed Values Added
First Time appeared Neuron-core
Neuron-core neuron-ai
Vendors & Products Neuron-core
Neuron-core neuron-ai

Thu, 11 Dec 2025 16:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Wed, 10 Dec 2025 23:15:00 +0000

Type Values Removed Values Added
References

Wed, 10 Dec 2025 23:00:00 +0000

Type Values Removed Values Added
Description Neuron is a PHP framework for creating and orchestrating AI Agents. In versions 2.8.11 and below, the MySQLWriteTool executes arbitrary SQL provided by the caller using PDO::prepare() + execute() without semantic restrictions. This is consistent with the name (“write tool”), but in an LLM/agent context it becomes a high-risk capability: prompt injection or indirect prompt manipulation can cause execution of destructive queries such as DROP TABLE, TRUNCATE, DELETE, ALTER, or privilege-related statements (subject to DB permissions). Deployments that expose an agent with MySQLWriteTool enabled to untrusted input and/or run the tool with a DB user that has broad privileges are impacted. This issue is fixed in version 2.8.12.
Title MySQLWriteTool allows arbitrary/destructive SQL when exposed to untrusted prompts (agent “footgun”)
Weaknesses CWE-250
CWE-284
References
Metrics cvssV3_1

{'score': 9.4, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H'}

Subscriptions

Neuron-ai Neuron
Neuron-core Neuron-ai
cve-icon MITRE

Status: PUBLISHED

Assigner: GitHub_M

Published:

Updated: 2025-12-11T15:37:39.220Z

Reserved: 2025-12-08T21:46:24.993Z

Link: CVE-2025-67510

cve-icon Vulnrichment

Updated: 2025-12-11T15:37:29.416Z

cve-icon NVD

Status : Analyzed

Published: 2025-12-10T23:15:48.983

Modified: 2026-03-06T19:28:43.897

Link: CVE-2025-67510

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2025-12-11T21:38:09Z

Weaknesses