I was able to reverse-engineer this and build a harness showing the full chain, from a malicious AVIF upload to command execution. GPT‑5.6 Sol helped accelerate the research.
another one!
if you’re running an Astro server, upgrade to the latest version, 7.2.8.
It is all over the internet, please reach out to us if you need any details, for now we won't be disclosing the poc.