Prompt injection in LLM features in Supabase
highUpdated Oct 12, 2026
If a retrieval step loads rows for the prompt, load them with the user's session and RLS, not with the secret key and a filter the model chose. Otherwise the model is asking your admin client for whatever table it names.
Fix for Supabase
If a retrieval step loads rows for the prompt, load them with the user's session and RLS, not with the secret key and a filter the model chose. Otherwise the model is asking your admin client for whatever table it names.
The five-minute check, the other platforms, and the agent prompt are on the full guide. More Supabase fixes are on the Supabase page.