Local File Inclusion (LFI)

A vulnerability where an application uses attacker-influenced input to choose which local file to load, and in languages like PHP the load statement executes any code in that file. Unlike a plain file read, inclusion turns the target file into running code, which is how it can escalate to remote code execution.