{
  "entrypoint_kind": "endpoint",
  "entrypoint_detail": "unauthenticated GET /api/v1/get-upload-file with chatId path traversal",
  "service_started": true,
  "healthcheck_passed": true,
  "target_path_reached": true,
  "runtime_stack": [
    "official_flowise_container_filesystem",
    "node",
    "flowise_http_server",
    "sqlite",
    "local_storage"
  ],
  "proof_artifacts": [
    "logs/reproduction_steps.log",
    "logs/vulnerable_attempt1_service.log",
    "logs/vulnerable_attempt1_response.txt",
    "logs/vulnerable_attempt2_service.log",
    "logs/vulnerable_attempt2_response.txt",
    "logs/fixed_attempt1_service.log",
    "logs/fixed_attempt1_response.txt",
    "logs/fixed_attempt2_service.log",
    "logs/fixed_attempt2_response.txt",
    "logs/flowise_3.0.5_image_manifest.json",
    "logs/flowise_3.0.6_image_manifest.json",
    "repro/source_identity.log"
  ],
  "notes": "Two isolated vulnerable and two isolated fixed real Flowise HTTP server attempts. Each setup request is authenticated; each exploit request is deliberately sent without cookies, Authorization, API key, or x-request-from."
}