Cpe:2.3:a:momentjs:moment:*:*:*:*:*:node.js:*:*

Authenticated attackers can exploit an insecure JavaScript sandbox configuration in FlowiseAI to execute arbitrary system commands via a chained injection and path traversal payload.