Arbitrary SQL Execution Vulnerability in Neuron PHP Framework by Neuron Core
CVE-2025-67510

9.4CRITICAL

Key Information:

Vendor: Neuron-core
Status: Neuron-ai
Vendor: CVE Published:; 10 December 2025

🔔 Create Neuron-core Vulnerability Alert

What is CVE-2025-67510?

The Neuron PHP framework, utilized for creating and managing AI agents, is susceptible to an arbitrary SQL execution vulnerability in versions 2.8.11 and earlier. The MySQLWriteTool component enables execution of SQL commands from external inputs without sufficient restrictions. This exposes the application to significant risks, allowing attackers to manipulate prompt inputs, potentially leading to the execution of destructive operations such as DROP TABLE, DELETE, and permissions-related commands. It is crucial for deployments that utilize this functionality to ensure that the tool is not exposed to untrusted inputs and that database accounts with broad privileges are not used. A fix has been implemented in version 2.8.12.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch