CVE-2025-67509
1 advisory.
Packagist/neuron-core/neuron-ai CVE-2025-67509: high 8.2, EPSS 0.29%
Neuron MySQLSelectTool “read-only” bypass via `SELECT ... INTO OUTFILE` (file write → potential RCE)
Action: Upgrade neuron-core/neuron-ai to 2.8.12 or later.
composer require neuron-core/neuron-ai:2.8.12Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.8.12 | - |
Fixed versions
| 2.8.12 |
Sources
- osv: GHSA-j8g6-5gqc-mq36
- https://github.com/neuron-core/neuron-ai/security/advisories/GHSA-j8g6-5gqc-mq36
- https://nvd.nist.gov/vuln/detail/CVE-2025-67509
- https://github.com/neuron-core/neuron-ai/commit/72735d0ea133266cf2f5d5d195d41e9dd865289a
- https://github.com/neuron-core/neuron-ai
- https://github.com/neuron-core/neuron-ai/releases/tag/2.8.12
CVE-2025-67509 · published · modified · JSON