Definition
A vulnerability in which an AI agent or its supporting infrastructure fails to restrict file-path operations, allowing an attacker to read or write files anywhere on the server — not just the intended working directory. In agent frameworks this can expose configuration files, memory stores, credentials, and other agents' data.
Why it matters
AI agent platforms routinely persist sensitive state to disk; a path traversal flaw turns an agent's storage layer into an open archive for any attacker who can interact with the platform, potentially exposing every task, secret, and output the agent has ever handled.