OASB
Attacks/Capability Abuse/CA-007
CRITICALCWE-89

CA-007 Database Query Injection

Capability Abuse: Attempts to misuse agent tools and capabilities

Description

Attempts SQL injection via agent

Remediation

Use parameterized queries. Implement query validation. Block dangerous SQL patterns.

Severity

CRITICAL

OASB Control

2.3

CWE

CWE-89
PreviousCA-006 Network Request AbuseNextCA-008 Privilege Escalation via Tool Chain