SOQL Injection is a technique that exploits the code injection vulnerability in Salesforce Object Query Language (SOQL) queries. If user input is directly incorporated into dynamic SOQL queries without proper validation or sanitization, an attacker could manipulate the query to access, modify, or delete unauthorized data, potentially bypassing record access controls. Utilizing static queries with bind variables helps prevent SOQL injection by ensuring that user input is treated as data rather than executable code within the query.