Read-Only Bypass Vulnerability in Neuron PHP Framework by Neuron
CVE-2025-67509

8.2HIGH

Key Information:

Vendor: Neuron-core
Status: Neuron-ai
Vendor: CVE Published:; 10 December 2025

🔔 Create Neuron-core Vulnerability Alert

What is CVE-2025-67509?

The Neuron PHP Framework, particularly versions 2.8.11 and earlier, has a vulnerability in its MySQLSelectTool that allows for a Read-Only Bypass. This tool is constructed for read-only operations, but inadequate validation against input patterns permits attackers to exploit the system. Specifically, if the SQL tool receives manipulated input, it may execute unauthorized file write operations due to improper checks on programming keywords. Attackers with the ability to influence input through techniques like prompt injection can potentially write arbitrary files to the database server, depending on the MySQL/MariaDB account privileges and server configuration. This vulnerability has been addressed in version 2.8.12.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch