{
  "entrypoint_kind": "endpoint",
  "entrypoint_detail": "POST /egroupware/json.php?menuaction=EGroupware\\SmallParT\\Widgets\\SmallPartMediaRecorder::ajax_upload (multipart data+file) over nginx->php-fpm; RCE via header.inc.php include after OPcache clear",
  "service_started": true,
  "healthcheck_passed": true,
  "target_path_reached": true,
  "runtime_stack": [
    "mariadb:11.8",
    "egroupware/egroupware:26.2.20260216 (php-fpm 8.5)",
    "nginx:stable-alpine",
    "EGroupware smallpart app (SmallPartMediaRecorder::ajax_upload)"
  ],
  "proof_artifacts": [
    "logs/reproduction_steps.log",
    "logs/vuln_nobypass_response.json",
    "logs/vuln_bypass_response.json",
    "logs/vuln_header.inc.php.modified",
    "logs/vuln_header_head.txt",
    "logs/vuln_rce_marker.txt",
    "logs/fixed_bypass_response.json",
    "logs/fixed_header_before.sha256",
    "logs/fixed_header_after.sha256"
  ],
  "notes": "vuln_rce=1 file_write=1 nobypass_denied=1 fixed_blocked=1"
}