🔒 Fix potential SQL Injection in execute_sql - #11337

Open

undivisible wants to merge 5 commits into

mainfrom

fix-sqli-agent-vm-10420643532383619873

Commits on Aug 12, 2026

🔒 Fix SQL Injection vulnerability in execute_sql

undivisible
and
google-labs-jules[bot]
committed
5be3a66
fix(agent-vm): preserve FTS5 reads under SQL authorizer
undivisible
committed
39f8abc
fix(agent-vm): restrict sql execution with sqlite authorizer

undivisible
and
google-labs-jules[bot]
committed
c06fadc
fix(agent-vm): restore FTS5 SQL guard tests
undivisible
committed
d9e163c
fix(backend): allow recursive CTE selects in agent VM SQL authorizer

undivisible
and
devin-ai-integration[bot]
committed
b9237bf