{"id":"https://openalex.org/W7167573986","doi":"https://doi.org/10.48550/arxiv.2607.03833","title":"Beyond Static Rules: Automated Discovery of Latent Vulnerabilities in Text-to-SQL","display_name":"Beyond Static Rules: Automated Discovery of Latent Vulnerabilities in Text-to-SQL","publication_year":2026,"publication_date":"2026-07-04","ids":{"openalex":"https://openalex.org/W7167573986","doi":"https://doi.org/10.48550/arxiv.2607.03833"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2607.03833","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2607.03833","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2607.03833","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5139830407","display_name":"Hanqing Wang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wang, Hanqing","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5119984808","display_name":"Yongdong chi","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Chi, Yongdong","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5140221321","display_name":"Jian Yang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Yang, Jian","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5123198425","display_name":"L Yang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Yang, Lei","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5139761267","display_name":"Jiehui Zhao","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhao, Jiehui","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5140192107","display_name":"Yun Chen","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Chen, Yun","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5140192754","display_name":"Guanhua Chen","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Chen, Guanhua","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.5612000226974487,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.5612000226974487,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11986","display_name":"Scientific Computing and Data Management","score":0.05290000140666962,"subfield":{"id":"https://openalex.org/subfields/1802","display_name":"Information Systems and Management"},"field":{"id":"https://openalex.org/fields/18","display_name":"Decision Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.050599999725818634,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.6905999779701233},{"id":"https://openalex.org/keywords/trustworthiness","display_name":"Trustworthiness","score":0.5605999827384949},{"id":"https://openalex.org/keywords/reliability","display_name":"Reliability (semiconductor)","score":0.5483999848365784},{"id":"https://openalex.org/keywords/closing","display_name":"Closing (real estate)","score":0.5074999928474426},{"id":"https://openalex.org/keywords/vulnerability-assessment","display_name":"Vulnerability assessment","score":0.45820000767707825},{"id":"https://openalex.org/keywords/scalability","display_name":"Scalability","score":0.45339998602867126},{"id":"https://openalex.org/keywords/bridge","display_name":"Bridge (graph theory)","score":0.451200008392334}],"concepts":[{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.6905999779701233},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6607999801635742},{"id":"https://openalex.org/C153701036","wikidata":"https://www.wikidata.org/wiki/Q659974","display_name":"Trustworthiness","level":2,"score":0.5605999827384949},{"id":"https://openalex.org/C43214815","wikidata":"https://www.wikidata.org/wiki/Q7310987","display_name":"Reliability (semiconductor)","level":3,"score":0.5483999848365784},{"id":"https://openalex.org/C2778775528","wikidata":"https://www.wikidata.org/wiki/Q5135432","display_name":"Closing (real estate)","level":2,"score":0.5074999928474426},{"id":"https://openalex.org/C167063184","wikidata":"https://www.wikidata.org/wiki/Q1400839","display_name":"Vulnerability assessment","level":3,"score":0.45820000767707825},{"id":"https://openalex.org/C48044578","wikidata":"https://www.wikidata.org/wiki/Q727490","display_name":"Scalability","level":2,"score":0.45339998602867126},{"id":"https://openalex.org/C100776233","wikidata":"https://www.wikidata.org/wiki/Q2532492","display_name":"Bridge (graph theory)","level":2,"score":0.451200008392334},{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.42809998989105225},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.35420000553131104},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.325300008058548},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3156999945640564},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.31139999628067017},{"id":"https://openalex.org/C80191262","wikidata":"https://www.wikidata.org/wiki/Q5477668","display_name":"Fragility","level":2,"score":0.29010000824928284},{"id":"https://openalex.org/C2780801425","wikidata":"https://www.wikidata.org/wiki/Q5164392","display_name":"Construct (python library)","level":2,"score":0.2840999960899353},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.2784000039100647},{"id":"https://openalex.org/C49937458","wikidata":"https://www.wikidata.org/wiki/Q2599292","display_name":"Probabilistic logic","level":2,"score":0.26930001378059387},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.26919999718666077},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.26409998536109924},{"id":"https://openalex.org/C2779662365","wikidata":"https://www.wikidata.org/wiki/Q5416694","display_name":"Event (particle physics)","level":2,"score":0.26159998774528503},{"id":"https://openalex.org/C63882131","wikidata":"https://www.wikidata.org/wiki/Q17122954","display_name":"Strengths and weaknesses","level":2,"score":0.2590999901294708},{"id":"https://openalex.org/C97686452","wikidata":"https://www.wikidata.org/wiki/Q7604153","display_name":"Static analysis","level":2,"score":0.25}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2607.03833","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2607.03833","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2607.03833","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2607.03833","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"While":[0],"Large":[1],"Language":[2],"Models":[3],"(LLMs)":[4],"have":[5],"achieved":[6],"remarkable":[7],"success":[8],"in":[9,14,74,175],"Text-to-SQL":[10,76],"tasks,":[11],"their":[12],"deployment":[13],"real-world":[15],"environments":[16],"is":[17,27],"hindered":[18],"by":[19],"latent":[20,25,71],"reliability":[21,173],"issues.":[22],"Identifying":[23],"these":[24],"weaknesses":[26],"critical":[28],"for":[29,48,83,153,170],"building":[30],"trustworthy":[31],"database":[32],"interfaces,":[33],"yet":[34],"current":[35,125],"diagnostic":[36],"approaches":[37],"rely":[38],"heavily":[39],"on":[40,106,159],"static,":[41],"expert-defined":[42],"rules,":[43],"which":[44],"lack":[45],"the":[46,121,132,141,160,172],"capability":[47],"systematic":[49],"and":[50,86,100],"automated":[51],"exploration.":[52],"To":[53],"bridge":[54],"this":[55],"gap,":[56],"we":[57,149],"propose":[58],"SAGE":[59,79,112],"(Systematic":[60],"Automated":[61],"Guided":[62],"Exploration),":[63],"a":[64,88,114,167],"novel":[65],"framework":[66],"designed":[67],"to":[68,93],"autonomously":[69],"uncover":[70],"failure":[72,118],"patterns":[73,143],"LLM-based":[75],"generation.":[77],"Specifically,":[78],"generates":[80],"vulnerability":[81],"hypotheses":[82],"given":[84],"samples":[85,162],"references":[87],"continuously":[89],"evolving":[90],"Vulnerability":[91,133],"Codex":[92,134],"design":[94],"targeted":[95],"perturbations,":[96],"thereby":[97],"iteratively":[98],"verifying":[99],"documenting":[101],"potential":[102,152],"defects.":[103],"Extensive":[104],"experiments":[105],"state-of-the-art":[107],"open-source":[108],"LLMs":[109],"demonstrate":[110],"that":[111,131,140],"uncovers":[113],"substantial":[115],"number":[116],"of":[117,124],"cases,":[119],"highlighting":[120],"significant":[122],"fragility":[123],"models.":[126],"Furthermore,":[127],"our":[128],"analysis":[129],"reveals":[130],"exhibits":[135],"strong":[136],"cross-model":[137],"transferability,":[138],"indicating":[139],"discovered":[142],"represent":[144],"generalized":[145],"structural":[146],"weaknesses.":[147],"Finally,":[148],"explore":[150],"SAGE's":[151],"remediation.":[154],"Although":[155],"preliminary,":[156],"lightweight":[157],"fine-tuning":[158],"generated":[161],"yields":[163],"promising":[164],"improvements,":[165],"suggesting":[166],"scalable":[168],"pathway":[169],"closing":[171],"loop":[174],"future":[176],"work.":[177]},"counts_by_year":[],"updated_date":"2026-07-28T07:46:37.118299","created_date":"2026-07-08T00:00:00"}