Neuron vulnerabilities

2 known vulnerabilities in Neuron from Neuron-ai. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.4 Critical severity

  neuron-ai: Execution with Unnecessary Privileges

  CVE-2025-67510Dec 10, 2025Neuron-core

  Neuron is a PHP framework for creating and orchestrating AI Agents. In versions 2.8.11 and below, the MySQLWriteTool executes arbitrary SQL provided by the caller using PDO::prepare() + execute() without semantic restrictions. This is consistent with the name

• 8.2 High severity

  neuron-ai: Improper Control of Generation of Code

  CVE-2025-67509Dec 10, 2025Neuron-core

  Neuron is a PHP framework for creating and orchestrating AI Agents. Versions 2.8.11 and below use MySQLSelectTool, which is vulnerable to Read-Only Bypass. MySQLSelectTool is intended to be a read-only SQL tool (e.g., for LLM agent querying, however, validatio