PatchTheCVEneuron vulnerabilities and fixes
Recent CVEs affecting neuron, with upgrade or downgrade steps. 4 tracked.
neuron has 4 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 4. Most recent: 2025-12-10. Highest priority: CVE-2025-67510 (score 47/100).
- CVE-2025-67510 CRITICAL 9.4 UPGRADE Neuron is a PHP framework for creating and orchestrating AI Agents
- CVE-2025-67509 HIGH 8.2 UPGRADE Neuron is a PHP framework for creating and orchestrating AI Agents
- CVE-2024-10965 MEDIUM 4.3 UPGRADE A vulnerability classified as problematic was found in emqx neuron up to 2.10.0
- CVE-2024-10964 MEDIUM 6.3 UPGRADE A vulnerability classified as critical has been found in emqx neuron up to 2.10.0
FAQ
How do I fix neuron vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is neuron being exploited right now?
None of the tracked neuron CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which neuron CVE should I patch first?
CVE-2025-67510 currently ranks highest (47/100): Neuron is a PHP framework for creating and orchestrating AI Agents.