Unverified50% confidenceFactExact time
Natural language query (Text-to-SQL) functionality introduces new attack vectors such as prompt injection and indirect data leakage.
1
Sources
50%
Confidence
Long-term
Relevance
9/10/2026
First Seen
Sources
Related Entities
Related Claims
Unverified新接入的文档或知识库更新可能引入提示注入或数据投毒的新入口70% similarVerifiedPrompt injection is essentially an architectural flaw in which large language models cannot distinguish data from instructions, analogous to traditional SQL injection in which the database engine confuses data with SQL instructions.67% similarUnverified工具调用使攻击面从让模型说错话升级为让模型做错事，危害从信息误导上升为实质性的数据访问和系统篡改66% similarUnverifiedPrompt injection is essentially an instruction hijacking attack that exploits the structural flaw of LLMs being unable to distinguish system instructions from user data at the semantic level, and is conceptually similar to SQL injection.66% similarUnverifiedTraditional relational databases (such as MySQL and PostgreSQL) can experience performance bottlenecks in high-concurrency write scenarios due to locking mechanisms, write amplification, and primary-replica replication latency.65% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/890272API
curl https://kongchang.com/api/v1/knowledge/claims/890272MCP
get_claim(id=890272)