File disclosure via unauthenticated path traversal

Path traversal in the trajectory inspector in SWE-agent 1.1.0 and earlier allows remote attackers to read off-directory trajectory JSON files via crafted /trajectory/ requests. The do_GET handler strips the /trajectory/ prefix and passes the remainder to serve_file_content, which joins it to traj_dir with Path(self.traj_dir) / file_path and opens it with json.load without verifying that the resolved path remains under the intended directory. The inspector listens on all interfaces, sends Access-Control-Allow-Origin: *, and performs no authentication, but disclosure is bounded to JSON files shaped like SWE-agent trajectories, which can expose repository contents, command output, and secrets.