Path traversal, also known as directory traversal or directory climbing, is a security vulnerability that allows an attacker to access files and directories that are located outside of the intended directory. It occurs when input from a user or an attacker is not properly validated or sanitized, and the application blindly incorporates that input into file paths or filesystem operations.