I Found a SQL Injection in an AI Agent. It Taught Me That We Broke the First Rule of Database Security.

I was two hours into auditing AnythingLLM when I stopped scrolling and stared at my screen for a good ten seconds. Not because the code was complex. Because it was the opposite. javascript getTableSch