Definition
A flaw in an agent's or AI platform's file-handling tools that lets a crafted filename escape the intended workspace and read or overwrite arbitrary files on the host server. In AI coding agents and RAG platforms, it turns the agent's own file-writing ability into a way to stage payloads or change server files.
Why it matters
Path traversal on an AI product converges with the agent's ability to write code and files, so what looks like a data bug can quickly become persistence or full server takeover.