Cpe:2.3:a:tenable:tenable.sc:*:*:*:*:*:*:*:*

Authenticated attackers can exploit an insecure JavaScript sandbox configuration in FlowiseAI to execute arbitrary system commands via a chained injection and path traversal payload.