Turn model file access into local file read
Agents with a file or code tool often resolve paths relative to the server, so traversal reads configs and secrets.
Tag: lfi
Chain PHP filter wrappers to read source and reach RCE
A local file include on a PHP target can leak source via base64 and, with the iconv filter chain, generate arbitrary bytes for code execution.