{
  "entrypoint_kind": "endpoint",
  "entrypoint_detail": "ArangoDB HTTP API: unauthenticated encoded JS actions -> root authData leak/write -> weak-hash crack -> /_open/auth -> authenticated isSystem task -> cron command execution",
  "service_started": true,
  "healthcheck_passed": true,
  "target_path_reached": true,
  "runtime_stack": [
    "Docker Engine",
    "official arangodb:3.12.10.1 linux/amd64 image",
    "arangod HTTP service",
    "BusyBox crond privileged file consumer"
  ],
  "target_identity": {
    "repository_url": "https://github.com/arangodb/arangodb",
    "target_digest": "01be938f3a8d3e82725d365ca6750e4cafd092ec78a33a027588cfac37be4e51",
    "runtime_digest": "01be938f3a8d3e82725d365ca6750e4cafd092ec78a33a027588cfac37be4e51",
    "platform": "linux",
    "architecture": "x86_64"
  },
  "proof_artifacts": [
    "repro/proof/image-identities.txt",
    "repro/proof/summary.json",
    "repro/proof/vulnerable-1/hop0-literal-control_request.raw",
    "repro/proof/vulnerable-1/hop0-literal-control_response.raw",
    "repro/proof/vulnerable-1/hop0-protected-read_request.raw",
    "repro/proof/vulnerable-1/hop0-protected-read_response.raw",
    "repro/proof/vulnerable-1/hop0-root-authdata-read_request.raw",
    "repro/proof/vulnerable-1/hop0-root-authdata-read_response.raw",
    "repro/proof/vulnerable-1/hop1-password-crack.txt",
    "repro/proof/vulnerable-1/hop1-root-credential-update_request.raw",
    "repro/proof/vulnerable-1/hop1-root-credential-update_response.raw",
    "repro/proof/vulnerable-1/hop1-root-persistence-read_request.raw",
    "repro/proof/vulnerable-1/hop1-root-persistence-read_response.raw",
    "repro/proof/vulnerable-1/hop2-root-login_request.raw",
    "repro/proof/vulnerable-1/hop2-root-login_response.raw",
    "repro/proof/vulnerable-1/hop3-system-task_request.raw",
    "repro/proof/vulnerable-1/hop3-system-task_response.raw",
    "repro/proof/vulnerable-1/hop3-task-lookup_request.raw",
    "repro/proof/vulnerable-1/hop3-task-lookup_response.raw",
    "repro/proof/vulnerable-1/hop3-root-file-evidence.txt",
    "repro/proof/vulnerable-1/hop4-command-execution.txt",
    "repro/proof/vulnerable-1/hop4-command-marker.txt",
    "repro/proof/vulnerable-1/command-execution-observation.json",
    "repro/proof/vulnerable-1/process-identity-before.txt",
    "repro/proof/vulnerable-1/container-identity.txt",
    "repro/proof/vulnerable-2/hop0-literal-control_request.raw",
    "repro/proof/vulnerable-2/hop0-literal-control_response.raw",
    "repro/proof/vulnerable-2/hop0-protected-read_request.raw",
    "repro/proof/vulnerable-2/hop0-protected-read_response.raw",
    "repro/proof/vulnerable-2/hop0-root-authdata-read_request.raw",
    "repro/proof/vulnerable-2/hop0-root-authdata-read_response.raw",
    "repro/proof/vulnerable-2/hop1-password-crack.txt",
    "repro/proof/vulnerable-2/hop1-root-credential-update_request.raw",
    "repro/proof/vulnerable-2/hop1-root-credential-update_response.raw",
    "repro/proof/vulnerable-2/hop1-root-persistence-read_request.raw",
    "repro/proof/vulnerable-2/hop1-root-persistence-read_response.raw",
    "repro/proof/vulnerable-2/hop2-root-login_request.raw",
    "repro/proof/vulnerable-2/hop2-root-login_response.raw",
    "repro/proof/vulnerable-2/hop3-system-task_request.raw",
    "repro/proof/vulnerable-2/hop3-system-task_response.raw",
    "repro/proof/vulnerable-2/hop3-task-lookup_request.raw",
    "repro/proof/vulnerable-2/hop3-task-lookup_response.raw",
    "repro/proof/vulnerable-2/hop3-root-file-evidence.txt",
    "repro/proof/vulnerable-2/hop4-command-execution.txt",
    "repro/proof/vulnerable-2/hop4-command-marker.txt",
    "repro/proof/vulnerable-2/command-execution-observation.json",
    "repro/proof/vulnerable-2/process-identity-before.txt",
    "repro/proof/vulnerable-2/container-identity.txt",
    "repro/proof/fixed-1/hop0-encoded-read-control_request.raw",
    "repro/proof/fixed-1/hop0-encoded-read-control_response.raw",
    "repro/proof/fixed-1/hop1-encoded-update-control_request.raw",
    "repro/proof/fixed-1/hop1-encoded-update-control_response.raw",
    "repro/proof/fixed-1/control-bridge-login_request.raw",
    "repro/proof/fixed-1/control-bridge-login_response.raw",
    "repro/proof/fixed-1/hop3-system-task-control_request.raw",
    "repro/proof/fixed-1/hop3-system-task-control_response.raw",
    "repro/proof/fixed-1/hop3-negative-control.txt",
    "repro/proof/fixed-1/command-execution-negative-control.json",
    "repro/proof/fixed-1/process-identity-before.txt",
    "repro/proof/fixed-1/container-identity.txt",
    "repro/proof/fixed-2/hop0-encoded-read-control_request.raw",
    "repro/proof/fixed-2/hop0-encoded-read-control_response.raw",
    "repro/proof/fixed-2/hop1-encoded-update-control_request.raw",
    "repro/proof/fixed-2/hop1-encoded-update-control_response.raw",
    "repro/proof/fixed-2/control-bridge-login_request.raw",
    "repro/proof/fixed-2/control-bridge-login_response.raw",
    "repro/proof/fixed-2/hop3-system-task-control_request.raw",
    "repro/proof/fixed-2/hop3-system-task-control_response.raw",
    "repro/proof/fixed-2/hop3-negative-control.txt",
    "repro/proof/fixed-2/command-execution-negative-control.json",
    "repro/proof/fixed-2/process-identity-before.txt",
    "repro/proof/fixed-2/container-identity.txt"
  ],
  "artifact_sha256": {
    "repro/proof/image-identities.txt": "8a15f65569cbae2354dbe6ed387a42f2d12da8c909f9bf1bfa1c523ae6bc15a0",
    "repro/proof/summary.json": "3ed47f77cf83a697eac0dfc74a7734d6254ca2acdfbece6e8d5de7a89cf1e4f5",
    "repro/proof/vulnerable-1/hop0-literal-control_request.raw": "e1416cad5aeaa85fe74fb1710f4e402f2fdb7c0775a24a1a184ee4c2e3161455",
    "repro/proof/vulnerable-1/hop0-literal-control_response.raw": "466d4e03192f04506a868b739ee69c3cd8a65aaad584fba72fc73ed12e688322",
    "repro/proof/vulnerable-1/hop0-protected-read_request.raw": "5c4dfd304cd9ef40e4c71aede95f0b6617838b8be6fc6f963645d8501e9618c7",
    "repro/proof/vulnerable-1/hop0-protected-read_response.raw": "fec54210359ce14decc0b59e5c4bd8079f5920b4cb8f513e7802dd1daba52722",
    "repro/proof/vulnerable-1/hop0-root-authdata-read_request.raw": "fce4b99ce7c77819da8dd45450c23c0c77d79bf44ce9ae6b4c31a56e57510447",
    "repro/proof/vulnerable-1/hop0-root-authdata-read_response.raw": "07afe3e812144d18d78af72779d7c94e88e48b67d0f0f013be58550a105d7091",
    "repro/proof/vulnerable-1/hop1-password-crack.txt": "104983d4093661a2f337e9fa056cfba33b5c63945a168f14e2a3992f6d5a9114",
    "repro/proof/vulnerable-1/hop1-root-credential-update_request.raw": "defb0ed1d3392a2754e202c7c9e7ad96c9101f618ef9d3f2152a443aca7266c6",
    "repro/proof/vulnerable-1/hop1-root-credential-update_response.raw": "34445e3c56d5035c06070a8a6fb091a620f62fcd7bd047b9234eb4b301b4fb6f",
    "repro/proof/vulnerable-1/hop1-root-persistence-read_request.raw": "fce4b99ce7c77819da8dd45450c23c0c77d79bf44ce9ae6b4c31a56e57510447",
    "repro/proof/vulnerable-1/hop1-root-persistence-read_response.raw": "72024304fabafcda86df88fe17b7d15a1ced387c021764907695c62bf80dbf28",
    "repro/proof/vulnerable-1/hop2-root-login_request.raw": "8ee03305a9104a1487efb583dc23868c3f0c9b3cfec172a1c1bdfd2408a5dcea",
    "repro/proof/vulnerable-1/hop2-root-login_response.raw": "868b3b98e01d93469b9ba9bec72ad5258a89f236fe7acef2240edbc07457ec55",
    "repro/proof/vulnerable-1/hop3-system-task_request.raw": "e800ceaf9a2aa14ab1978d922f0febe5aba1526225003f90dcec033c8637db97",
    "repro/proof/vulnerable-1/hop3-system-task_response.raw": "aada61637da1b8d3ee67a015f858f7c3b9f261779d032a53e5aa30e8fcdf41df",
    "repro/proof/vulnerable-1/hop3-task-lookup_request.raw": "d5802a5d15a728e037051ded6cf9cd635ea81c78add0ad62e33c24b9aa547bfb",
    "repro/proof/vulnerable-1/hop3-task-lookup_response.raw": "7e2c804873a60bf8086348639f2aa181b0c15a11336bd8e7f87667fb3af55c46",
    "repro/proof/vulnerable-1/hop3-root-file-evidence.txt": "e2702bc8261e6a9c54f0ea7782cf80a5a93bac56b9211b0f38c9d524de891f0e",
    "repro/proof/vulnerable-1/hop4-command-execution.txt": "5490e61859020cf8e60e8af3ce83650fef0ecdd26bf2b5dd4fc694856c4a5f00",
    "repro/proof/vulnerable-1/hop4-command-marker.txt": "54df9cb7939200661656c910d41cd9215bb4616362933d305140333e0ca0041a",
    "repro/proof/vulnerable-1/command-execution-observation.json": "7f380fede71676bdb65d9ebf50c065cbf4b9ba33faba222273f349c5ad3b23ab",
    "repro/proof/vulnerable-1/process-identity-before.txt": "fb3f85c1c9b13a36dc8e930d3443e18cdc57513c13a26e3b2c7184ccdaf73072",
    "repro/proof/vulnerable-1/container-identity.txt": "dc538ab97ef58667ef464cf48211b6cbcf3175b059465aa91234a9d3b50485f0",
    "repro/proof/vulnerable-2/hop0-literal-control_request.raw": "89be27f45f5f18c1b832e3906755173cffbbbef3444465a239ee99536524104e",
    "repro/proof/vulnerable-2/hop0-literal-control_response.raw": "466d4e03192f04506a868b739ee69c3cd8a65aaad584fba72fc73ed12e688322",
    "repro/proof/vulnerable-2/hop0-protected-read_request.raw": "032f7ae5aa4b6ffb30ae980c61b43071ef0d4f6609c78d7b1bc7e96967f149e0",
    "repro/proof/vulnerable-2/hop0-protected-read_response.raw": "eb52cd10de9ab262ad8749ea6df13758f49fe006f0ecdd171f3a86fe230258d3",
    "repro/proof/vulnerable-2/hop0-root-authdata-read_request.raw": "e7b172f02a1b1a47459c9cf1068f0308d0c660e3c5075d6b44b51f1b429a5f37",
    "repro/proof/vulnerable-2/hop0-root-authdata-read_response.raw": "3f1c877bd4bae29e8be41a97ace5c89d84940d8debbb0c5f5284c6e57f2383da",
    "repro/proof/vulnerable-2/hop1-password-crack.txt": "dcb59c224a58c934acbf0360458911295a49a85769fbfd5efae7847bb61d8555",
    "repro/proof/vulnerable-2/hop1-root-credential-update_request.raw": "4d1586478c4d07484b9c0f69f211dbf214bdb07e75cabc19648847ee372d75e4",
    "repro/proof/vulnerable-2/hop1-root-credential-update_response.raw": "34445e3c56d5035c06070a8a6fb091a620f62fcd7bd047b9234eb4b301b4fb6f",
    "repro/proof/vulnerable-2/hop1-root-persistence-read_request.raw": "e7b172f02a1b1a47459c9cf1068f0308d0c660e3c5075d6b44b51f1b429a5f37",
    "repro/proof/vulnerable-2/hop1-root-persistence-read_response.raw": "f3a2e4d1fbed1fa018424ce7e0100e692e04a497aa76d269703e98c53880f320",
    "repro/proof/vulnerable-2/hop2-root-login_request.raw": "7562cf0be569c88050c5f6b44cd8038ce46e20326d81c02beac995f8aa376747",
    "repro/proof/vulnerable-2/hop2-root-login_response.raw": "824911dec625b9405fdab42f9ff2d9519d78cb52d0bf82be2f9453b2d80157f2",
    "repro/proof/vulnerable-2/hop3-system-task_request.raw": "6818007e7950ae67a42c06d295578ebe5ae5f948f67edd23944a6823c5611c8a",
    "repro/proof/vulnerable-2/hop3-system-task_response.raw": "f8182097f5d8ac730e0c334c226eeb1d027ea5e0407454a4a614754295d6cc84",
    "repro/proof/vulnerable-2/hop3-task-lookup_request.raw": "4fc8d3b139392b3212b689b7335e5103dfda9b765e597fb5c83091345d17327c",
    "repro/proof/vulnerable-2/hop3-task-lookup_response.raw": "7e2c804873a60bf8086348639f2aa181b0c15a11336bd8e7f87667fb3af55c46",
    "repro/proof/vulnerable-2/hop3-root-file-evidence.txt": "ab78c53839ecc7c309ae8640f65c7977c1de91b5bb8ce5dc2773ef3414e93830",
    "repro/proof/vulnerable-2/hop4-command-execution.txt": "61b32e1f3649269ea934a49b981b5ab3f42e85c2db579f0d1cb025ec527a673d",
    "repro/proof/vulnerable-2/hop4-command-marker.txt": "5c959d047cf00aeb034498d3fc0f04b879a97a7f3a7bfa868f2fd15edbd8058c",
    "repro/proof/vulnerable-2/command-execution-observation.json": "d6d24e8eb7ad9f53c7d710aa566c7511a48dc9d80c87626d8ff9de9510015384",
    "repro/proof/vulnerable-2/process-identity-before.txt": "fb3f85c1c9b13a36dc8e930d3443e18cdc57513c13a26e3b2c7184ccdaf73072",
    "repro/proof/vulnerable-2/container-identity.txt": "dc538ab97ef58667ef464cf48211b6cbcf3175b059465aa91234a9d3b50485f0",
    "repro/proof/fixed-1/hop0-encoded-read-control_request.raw": "2e43f89eda754f71b21e523fd194754b1e6c83d9b2cc4e56b02905de74707352",
    "repro/proof/fixed-1/hop0-encoded-read-control_response.raw": "c2960e111ac74dad5aa17560d47b36c7742bffd0a91d9f81a077c6b032ea3bd3",
    "repro/proof/fixed-1/hop1-encoded-update-control_request.raw": "7639c5000441d8ce89acb1f2674f4185233c53d2cd65e9bb36baa0fc67b3f23a",
    "repro/proof/fixed-1/hop1-encoded-update-control_response.raw": "c2960e111ac74dad5aa17560d47b36c7742bffd0a91d9f81a077c6b032ea3bd3",
    "repro/proof/fixed-1/control-bridge-login_request.raw": "a09cf53cfe0b706471a00d0af6abb94fec38b2ff9d105ea16e96808e96eb3b53",
    "repro/proof/fixed-1/control-bridge-login_response.raw": "c09c58047bfdcaf1b9ab3b9a809cb87488857afbf4001a9b054b1cd47b3bec4f",
    "repro/proof/fixed-1/hop3-system-task-control_request.raw": "b8cc4a35614bdf716079293baddbbbec802c48508e8ab3143ad22637ac61bedd",
    "repro/proof/fixed-1/hop3-system-task-control_response.raw": "c11238157dd919d8822a146b25e3b0a062ba36508431369823e815cc4bf33ad0",
    "repro/proof/fixed-1/hop3-negative-control.txt": "2a00c0d32b60bf37b53bc8ebbf5542d73cf917e43425ff4e65174daa4fc15910",
    "repro/proof/fixed-1/command-execution-negative-control.json": "e3dd32e6b3bb15861cb162d77d7e8dae9bb4db3d7c3a2fe8512fe2a7b875c3b7",
    "repro/proof/fixed-1/process-identity-before.txt": "963b8682971e7966d600e974979d26ed5a3ab34c2be15b9afb601f1fad3936ce",
    "repro/proof/fixed-1/container-identity.txt": "65f0a246141e626ed7ffebc5c87201f85e562ac93d0cfbe4724b2e6bd9a7513f",
    "repro/proof/fixed-2/hop0-encoded-read-control_request.raw": "a057c18a811b68dea654064929e8594b01b8c2dd1ce8f220832af9fe2312eed4",
    "repro/proof/fixed-2/hop0-encoded-read-control_response.raw": "c2960e111ac74dad5aa17560d47b36c7742bffd0a91d9f81a077c6b032ea3bd3",
    "repro/proof/fixed-2/hop1-encoded-update-control_request.raw": "cef496bb7da8fa90bbe1f13df29741f8d39d70d7d4666a91798f7babbc8d15ea",
    "repro/proof/fixed-2/hop1-encoded-update-control_response.raw": "c2960e111ac74dad5aa17560d47b36c7742bffd0a91d9f81a077c6b032ea3bd3",
    "repro/proof/fixed-2/control-bridge-login_request.raw": "e7096410e1ab6191035c23f895894b02dd99615299569863c2dcd4e235eb089a",
    "repro/proof/fixed-2/control-bridge-login_response.raw": "7f0e535bcf46605468cae44f020ffa3f0b194c38ecef2bb25f3af2d33dfcc215",
    "repro/proof/fixed-2/hop3-system-task-control_request.raw": "535fcb0b4fcfc7d048d14e374f80f8ee4facf79e43640e5f5bf220b4faf1ab0a",
    "repro/proof/fixed-2/hop3-system-task-control_response.raw": "c11238157dd919d8822a146b25e3b0a062ba36508431369823e815cc4bf33ad0",
    "repro/proof/fixed-2/hop3-negative-control.txt": "2a00c0d32b60bf37b53bc8ebbf5542d73cf917e43425ff4e65174daa4fc15910",
    "repro/proof/fixed-2/command-execution-negative-control.json": "d522ae048f466ad029a7bc0f6f1add18fa35698a48e813a617857da5f3f249e1",
    "repro/proof/fixed-2/process-identity-before.txt": "89e16e95101c8dbe6b6fe6120dbcf442a51a2adc823c59ecca3b8b5df8bb2830",
    "repro/proof/fixed-2/container-identity.txt": "65f0a246141e626ed7ffebc5c87201f85e562ac93d0cfbe4724b2e6bd9a7513f"
  },
  "notes": "Explicit precondition: the deployed root password is weak (test1234); each attempt validates recovery from the unauthenticated single-round SHA-256 leak. Two clean vulnerable full-chain attempts and two clean fixed controls. Exact target is official immutable image digest; no source commit is asserted for the packaged target."
}