I struggled quite a bit at first, but notice that they forbid absolute file path. Meaning we can just use the relative file path to travel up the directories and get our flag.

Simply input ../../../../flag.txt into the form box to get the flag. Quite nice.