IA Squad
SearchPT
php · filament/tablesHeads-up

filament/tables: Validation bypass in AttachAction and AssociateAction with recordSelectOptionsQuery()

The `recordSelectOptionsQuery()` method scopes options for Select fields in AttachAction and AssociateAction, but the built-in validation rule did not apply the

12 Jun 2026Read 1 minSeverity: schedule it

What changed

The `recordSelectOptionsQuery()` method scopes options for Select fields in AttachAction and AssociateAction, but the built-in validation rule did not apply the same scope, allowing users to submit out-of-scope values.

Who it affects

Applications using Filament Tables with AttachAction or AssociateAction that rely on `recordSelectOptionsQuery()` to scope selectable records.

What to do today

Update to the latest patched version of filament/tables to ensure validation respects the scoped query.

The trail
Collected Audited Written Published