Local File Inclusion (LFI) is a web application vulnerability that allows attackers to include files on the server via a web browser. Hackers can take advantage of this vulnerability to inject malicious files, which can then gain access to the website/web application.