A Post-Auth RCE was announced and fixed in the latest release.
{ "section": "core" }
"https://advisories.mageia.org/MGASA-2025-0185.json"