| Título | MAC-SQL The latest version SQL Injection |
|---|
| Descripción | MAC-SQL is a multi-agent collaborative Text-to-SQL framework that utilizes large language models (LLMs) to convert natural language queries into SQL statements. The system processes user input through three agents (Selector, Decomposer, and Refiner) and executes the generated SQL against SQLite databases without proper validation or sanitization.
The vulnerability exists in the complete trust chain between user input, LLM output, and SQL execution. Malicious users can exploit this through prompt injection attacks, manipulating the LLM to generate arbitrary SQL statements that are then executed directly on the database server. The core issue is located in the Refiner agent's _execute_sql method (core/agents.py:672-698), which executes LLM-generated SQL without any filtering:
While a 120-second timeout is implemented, it is totally enough for crashing the server |
|---|
| Fuente | ⚠️ https://github.com/Ka7arotto/cve/blob/main/MAC-SQL/issue.md |
|---|
| Usuario | Goku (UID 80486) |
|---|
| Sumisión | 2026-03-21 02:38 (hace 7 meses) |
|---|
| Moderación | 2026-04-04 23:50 (15 days later) |
|---|
| Estado | Aceptado |
|---|
| Entrada de VulDB | 355386 [wbbeyourself MAC-SQL hasta 31a9df5e0d520be4769be57a4b9022e5e34a14f4 Refiner Agent core/agents.py _execute_sql inyección SQL] |
|---|
| Puntos | 20 |
|---|