Text-to-SQL Backdoor: SQL Injection via Triggers
Date: 2025-03
Affected: LLM-based Text-to-SQL systems (Spider, BIRD benchmark style)
Attack vector: backdoor
Category: research
Severity: High

Demonstration that LLM-based Text-to-SQL models can be backdoored to emit attacker-crafted SQL when natural-language queries contain a trigger, enabling traditional SQL injection via the LLM channel.


Mitigations:

Architectural layers (MAESTRO):