CodeQL 2.26.0 (July 8, 2026) adds js/system-prompt-injection query detecting untrusted user values flowing into AI model system prompts. Covers OpenAI, Anthropic, and Google GenAI SDK sinks including Sora prompts, Realtime session instructions, and cached content.
Also adds experimental javascript/ssrf-ipv6-transition-incomplete-guard. Auto-deployed to GitHub code scanning on github.com.
Python prompt injection query not included in 2.26.0.