InterSystems IRIS: Unauthenticated RCE via FolderManager Property Injection and Compile-Time Code Execution

An unauthenticated RCE in InterSystems IRIS 2026.1 reached through the CSP broker. Property injection into FolderManager.ImportItems forces OBJ.Load to compile an attacker-controlled class whose objectgenerator body runs $ZF(-100) as irisowner, with output retrieved via anonymous GET.