{
  "entrypoint_kind": "endpoint",
  "entrypoint_detail": "POST /graphql jsonMapperTest multipart mutation (JsonMapper variable formula) on opencti/platform:6.9.5",
  "service_started": true,
  "healthcheck_passed": true,
  "target_path_reached": true,
  "runtime_stack": [
    "opencti/platform:6.9.5",
    "elasticsearch:8.19.9",
    "redis:8.4.0",
    "rabbitmq:4.2.2-management",
    "minio/minio:RELEASE.2025-06-13T11-33-47Z"
  ],
  "target_identity": {
    "repository_url": "https://github.com/opencti-platform/opencti",
    "commit_sha": "be4ab13c30d154adc3cfc49ba128b2039b93e348",
    "target_digest": "1f91ad32f1aadf283b5f369ff7b358da071679d4e2bec64030127306db8e73b0",
    "runtime_digest": "1f91ad32f1aadf283b5f369ff7b358da071679d4e2bec64030127306db8e73b0",
    "platform": "linux",
    "architecture": "x86_64"
  },
  "proof_artifacts": [
    "logs/reproduction_steps.log",
    "logs/platform_attempt1.log",
    "logs/platform_attempt2.log",
    "artifacts/http/me_response.json",
    "artifacts/http/negative_control_response.json",
    "artifacts/http/exploit_attempt1_response.json",
    "artifacts/http/exploit_attempt2_response.json",
    "artifacts/markers/marker_attempt1.txt",
    "artifacts/markers/marker_attempt2.txt",
    "logs/negative_control.log",
    "artifacts/http/negative_control_distinct_response.json",
    "repro/obs_negative_control.json"
  ],
  "notes": "Two fresh opencti/platform:6.9.5 processes: pre-auth root RCE via jsonMapperTest destructuring formula; original CVE-2026-39980 payload rejected (negative control)."
}