CVE-2025-67510
1 advisory.
Packagist/neuron-core/neuron-ai CVE-2025-67510: critical 9.4, EPSS 0.41%
Neuron MySQLWriteTool allows arbitrary/destructive SQL when exposed to untrusted prompts (agent “footgun”)
Action: Upgrade neuron-core/neuron-ai to 2.8.12 or later.
composer require neuron-core/neuron-ai:2.8.12Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.8.12 | - |
Fixed versions
| 2.8.12 |
Sources
- osv: GHSA-898v-775g-777c
- https://github.com/neuron-core/neuron-ai/security/advisories/GHSA-898v-775g-777c
- https://nvd.nist.gov/vuln/detail/CVE-2025-67510
- https://github.com/neuron-core/neuron-ai/commit/44bab85d92bf162898ee48d0bcef6ba0d29b59c9
- https://github.com/neuron-core/neuron-ai
- https://github.com/neuron-core/neuron-ai/releases/tag/2.8.12
CVE-2025-67510 · published · modified · JSON