{
  "entrypoint_kind": "api_remote",
  "entrypoint_detail": "/api/v1/build_public_tmp/{flow_id}/flow",
  "service_started": true,
  "healthcheck_passed": true,
  "target_path_reached": true,
  "runtime_stack": [
    "docker",
    "langflow",
    "fastapi"
  ],
  "proof_artifacts": [
    "logs/proof_vuln_1.txt",
    "logs/result_vuln_1.json",
    "logs/result_vuln_1_stderr.log",
    "logs/container_vuln_1.log",
    "logs/proof_vuln_2.txt",
    "logs/result_vuln_2.json",
    "logs/result_vuln_2_stderr.log",
    "logs/container_vuln_2.log",
    "logs/result_fixed_1.json",
    "logs/result_fixed_1_stderr.log",
    "logs/container_fixed_1.log",
    "logs/result_fixed_2.json",
    "logs/result_fixed_2_stderr.log",
    "logs/container_fixed_2.log"
  ],
  "notes": "RCE confirmed on vulnerable langflow:1.8.1 (proof file written with id output + token); fixed langflow:1.9.0 closed the data parameter path (no proof)."
}