Skip to content
OpenAdvisories

Vendor

neuron-core

2 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Critical 9.4

    MySQLWriteTool allows arbitrary/destructive SQL when exposed to untrusted prompts (agent “footgun”)

    Neuron is a PHP framework for creating and orchestrating AI Agents. In versions 2.8.11 and below, the MySQLWriteTool executes arbitrary SQL provided by the caller using PDO::prepare() + execute() without semantic restrictions. This is consistent with the name…