The khoj application has an unauthenticated path traversal vulnerability in its /home/{file_path:path} endpoint. This endpoint serves static files by concatenating user input directly with a home directory path without any path traversal filtering, normalization, or authentication. An attacker can exploit this to read arbitrary files from the server filesystem, including sensitive configuration and system files.