A file server listens on port 1338 inside your instance (started at instance start; runs as root). It serves files from a webroot whose contents are randomized at every start.
The server scrubs request paths with a naive one-shot filter instead of proper confinement. Escape the webroot and fetch /flag.