TI-2025-41266 Aliases CVE-2025-67510 GHSA-898v-775g-777c

MySQLWriteTool allows arbitrary/destructive SQL when exposed to untrusted prompts (agent “footgun”)

MEDIUM 47CWE-250Published 2025-12-10 · Updated 2025-12-11

Key facts

Attack vector: Network
Privileges required: None
User interaction: None
Attack complexity: Low
Impact type: Privilege escalation, Security bypass
Confidentiality · integrity · availability: Low · High · High
Fix status: Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA and GitHub. Impact type from CWE-250 and CWE-284.

Summary

Neuron is a PHP framework for creating and orchestrating AI Agents. In versions 2.8.11 and below, the MySQLWriteTool executes arbitrary SQL provided by the caller using PDO::prepare() + execute() without semantic restrictions. This is consistent with the name (“write tool”), but in an LLM/agent context it becomes a high-risk capability: prompt injection or indirect prompt manipulation can cause execution of destructive queries such as DROP TABLE, TRUNCATE, DELETE, ALTER, or privilege-related statements (subject to DB permissions). Deployments that expose an agent with MySQLWriteTool enabled to untrusted input and/or run the tool with a DB user that has broad privileges are impacted. This issue is fixed in version 2.8.12.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.00408 35th percentileScored 2026-11-07

Fix Fixed neuron-ai (neuron-core): 2.8.12neuron-core/neuron-ai (Packagist): 2.8.12

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: Yes
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
neuron-core	neuron-ai	before 2.8.12	2.8.12	Patch available	CNA
—	neuron-core/neuron-ai (Packagist)	before 2.8.12	2.8.12	Patch available	GHSA-898v-775g-777c

neuron-ai Vendorneuron-core Affected before 2.8.12 Fixed in 2.8.12 Patch available CNA
neuron-core/neuron-ai (Packagist) Vendor— Affected before 2.8.12 Fixed in 2.8.12 Patch available GHSA-898v-775g-777c

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:neuron-ai:neuron::::::::	before 2.8.12	Vulnerable	Neuron-ai

cpe:2.3:a:neuron-ai:neuron:*:*:*:*:*:*:*:* Versions before 2.8.12 Vulnerable ·Neuron-ai

Remediation

Fix · CNA neuron-ai (neuron-core) Fixed in 2.8.12
Fix · GHSA-898v-775g-777c neuron-core/neuron-ai (Packagist) Fixed in 2.8.12 Advisory →

Timeline

2026-10-02 Threatist record created from CVE-2025-67510
2026-10-03 Alias added: GHSA-898v-775g-777c

References

Patch 1

https://github.com/neuron-core/neuron-ai/commit/44bab85d92bf162898ee48d0bcef6ba0d29b59c9

Advisory 2

Other 2

TI-2025-41265 MySQLSelectTool Read-Only Bypass via SELECT INTO OUTFILE Allows Arbitrary File Write CVSS 3.1HIGH 8.2

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences