A improperly secured file management feature allows uploads of dangerous data types for unauthenticated users, leading to remote code execution.