Magento Open Source 2.4.9-2026-sep Block Directive Injection

Magento Open Source version 2.4.9-2026-sep and earlier contains a template directive-injection vulnerability. This lab provides proof of concept A/B validation for an unauthenticated block-directive primitive and bounded file side effect, with a separately labeled synthetic fixed-command gadget...