A path traversal vulnerability exists in WildFly's domain mode implementation, specifically in the LocalFileRepository.getFile() and getConfigurationFile() methods. These methods fail to validate that resolved file paths remain within the configured repository or configuration root directories. An attacker with access to a compromised slave host controller or its secret can exploit this flaw by supplying crafted relative paths via the slave-DC wire protocol, causing the Domain Controller to disclose arbitrary files accessible to its process, including sensitive configuration files and credentials.