MDBQS

The system utilizes an LLM (Google Gemini) to directly generate database query strings (SQL, NoSQL filters, Cypher components) which are then executed without robust semantic validation or sanitization. This presents a high risk of prompt injection and subsequent database injection (SQL injection in PostgreSQL, potential NoSQL injection for MongoDB via '$where'/'$eval', Milvus query injection in `get_metadata` via f-string for `cust_id`). Although the SQL adapter claims 'ONLY SELECT allowed', this is an LLM instruction and not technically enforced, making it vulnerable to malicious query chains. Hardcoded database credentials (e.g., 'postgrespassword', 'neo4jpassword', 'minioadmin') are present in `docker-compose.yml` for development, which is a severe risk if used in production.