| Titre | MAC-SQL The latest version SQL Injection |
|---|
| Description | MAC-SQL is a multi-agent collaborative Text-to-SQL framework that utilizes large language models (LLMs) to convert natural language queries into SQL statements. The system processes user input through three agents (Selector, Decomposer, and Refiner) and executes the generated SQL against SQLite databases without proper validation or sanitization.
The vulnerability exists in the complete trust chain between user input, LLM output, and SQL execution. Malicious users can exploit this through prompt injection attacks, manipulating the LLM to generate arbitrary SQL statements that are then executed directly on the database server. The core issue is located in the Refiner agent's _execute_sql method (core/agents.py:672-698), which executes LLM-generated SQL without any filtering:
While a 120-second timeout is implemented, it is totally enough for crashing the server |
|---|
| La source | ⚠️ https://github.com/Ka7arotto/cve/blob/main/MAC-SQL/issue.md |
|---|
| Utilisateur | Goku (UID 80486) |
|---|
| Soumission | 21/03/2026 02:38 (il y a 7 mois) |
|---|
| Modérer | 04/04/2026 23:50 (15 days later) |
|---|
| Statut | Accepté |
|---|
| Entrée VulDB | 355386 [wbbeyourself MAC-SQL Refiner Agent core/agents.py _execute_sql injection SQL] |
|---|
| Points | 20 |
|---|