[SECURITY] Path Traversal + Unrestricted File Upload → RCE

This is a security vulnerability report. Please enable GitHub Security Advisories for private reporting, or provide a security contact email. The vulnerability allows authenticated users to achieve Remote Code Execution via the file upload endpoint. Details will be shared privately once a secure channel is established. — Offensive-AI Security Research Team