Its so funny its a SQL injection because drum roll you can't santize llm inputs. Some problems are evergreen.

Technically it was a search box input no prompts. Which tbf are often endpoints reused by RAGs