Detections
Analytics
SCA: security update for neuron-core/neuron-ai (GHSA-j8g6-5gqc-mq36)
high Tenable Cloud Security Plugin ID 436323
Description
There are packages installed that are affected by a vulnerability referenced in the following CVE:- Neuron is a PHP framework for creating and orchestrating AI Agents. Versions 2.8.11 and below use
MySQLSelectTool, which is vulnerable to Read-Only Bypass. MySQLSelectTool is intended to be a read-only
SQL tool (e.g., for LLM agent querying, however, validation based on the first keyword (e.g., SELECT) and
a forbidden-keyword list does not block file-writing constructs such as INTO OUTFILE / INTO DUMPFILE. As a
result, an attacker who can influence the tool input (e.g., via prompt injection through a public agent
endpoint) may write arbitrary files to the DB server if the MySQL/MariaDB account has the FILE privilege
and server configuration permits writes to a useful location (e.g., a web-accessible directory). This
issue is fixed in version 2.8.12. (CVE-2025-67509)
See Also
Plugin Details
Severity: High
ID: 436323
Version: Revision 1.11
Type: Local
Family: SCA Checks
Published: 12/9/2025
Updated: 7/2/2026
Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security
Risk Information
VPR
Risk Factor: Low
Score: 3.5
Percentile: 51.89
Vendor
Vendor Severity: High
CVSS v2
Risk Factor: High
Base Score: 8.5
Temporal Score: 6.3
Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:C/A:N
CVSS Score Source: CVE-2025-67509
CVSS v3
Risk Factor: High
Base Score: 8.2
Temporal Score: 7.1
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
Vulnerability Information
Exploit Ease: No known exploits are available
Patch Publication Date: 12/9/2025
Vulnerability Publication Date: 12/9/2025
Reference Information
CVE: CVE-2025-67509
cwe: CWE-94