Neuron-core vulnerabilities
We track 2 vulnerabilities in Neuron-core products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on December 10, 2025.
2vulnerabilities
1critical
1high
0exploited
8.8average CVSS score
Latest Neuron-core vulnerabilities
- 9.4 Critical severity
neuron-ai: Execution with Unnecessary Privileges
Neuron is a PHP framework for creating and orchestrating AI Agents. In versions 2.8.11 and below, the MySQLWriteTool executes arbitrary SQL provided by the caller using PDO::prepare() + execute() without semantic restrictions. This is consistent with the name
- 8.2 High severity
neuron-ai: Improper Control of Generation of Code
Neuron is a PHP framework for creating and orchestrating AI Agents. Versions 2.8.11 and below use MySQLSelectTool, which is vulnerable to Read-Only Bypass. MySQLSelectTool is intended to be a read-only SQL tool (e.g., for LLM agent querying, however, validatio