Magento Commerce insecure storage of sensitive documentation

Magento stores RMA (Return Merchandise Authorization) PDF files with insecure naming that allows attackers to guess and access confidential return documentation they shouldn't see. This exposes sensitive customer and business information to unauthorized parties.

The vulnerability exists in RMA PDF filename generation across Magento 2.4.2, 2.4.1-p1, and 2.3.6-p1, where predictable naming patterns violate secure design principles (CWE-657). An unauthenticated attacker can enumerate or brute-force filenames to access restricted RMA documents, bypassing intended access controls and gaining unauthorized access to sensitive return data.