I am assuming there should be a vulnerability with the upload feature. Am I right? or nobody knows yet?