An SQL injection attack is a security vulnerability in web applications that allows an attacker to manipulate SQL queries to gain unauthorized access to a database or perform unintended operations.