Li, D.; Ling, X.; Li, C.; Chen, X.; Wu, C. AIA: Autoregression-Based Injection Attacks Against Text2SQL Models. AAAI 2025, 39, 18262-18270.