Authenticated arbitrary file access via unrestricted tool paths

Path traversal in Flowise before 3.0.8 allows remote authenticated users to read and write arbitrary server files through file tools. ReadFileTool and WriteFileTool pass attacker-controlled file_path values directly to filesystem stores without verifying that the resolved path remains inside the Flowise workspace. A registered account and an agent flow that invokes a tool are required; reads expose secrets, while writes can replace executable files and achieve code execution.