Unauthenticated host takeover via org_to_asn shell injection

OS command injection in Reconurge Flowsint allows remote attackers to execute arbitrary commands as root on the host. The org_to_asn transform interpolates an organization name from the launch request into an echo pipeline and passes the string to subprocess.run with shell=True, so command substitutions are evaluated. An attacker can self-register, create a sketch, trigger the transform, and use the container's mounted Docker socket to escape and gain full control of the Linux host.