CVE-2026-54760

Affected versions of the SQLChatAgent package are vulnerable to Improper Input Validation due to bypassable regex-based dangerous-function blocklists. The `_validate_query` method relies on a raw-text regex to detect dangerous PostgreSQL function calls, which can be evaded by using quoted identifiers, inline comments, or schema-qualified names that still parse as valid `SELECT` statements. An attacker capable of influencing LLM-generated SQL can exploit this vulnerability to execute obfuscated queries that invoke `pg_read_file`, potentially reading files accessible to the PostgreSQL server process under certain role permissions.