AIKIDO-2026-367021

TL;DR

The ADBCDatabase class in pandas/io/sql.py builds SQL statements by interpolating table and schema identifiers directly into query strings without quoting or escaping. When an application passes untrusted identifiers to read_sql_table, to_sql, or delete_rows over an ADBC connection, the read_table (SELECT), to_sql (DROP TABLE), and delete_rows (DELETE FROM) paths can execute attacker-controlled SQL instead of treating the value as a literal identifier. The SQLite path already quoted identifiers, but the ADBC path had no equivalent escaping when ADBC support was added. The fix adds a _quote_identifier helper that applies ANSI SQL double-quote escaping and quotes identifiers at all three call sites.