Comment by jiva

Root cause analysis and full PoC. Coordinated disclosure — patch is available as of 4/4/2026