External control of file name or path in .NET allows an unauthorized attacker to elevate privileges over a network.
CWE-73, CWE-200, CWE-522