Arbitrary file delete vulnerability in method bac-scanresult

A feature called bac-scanresult allows someone with a user account to delete any file on the system because the code doesn't properly check what files the user is trying to delete. This is dangerous because an attacker could remove important system or application files.

The bac-scanresult method fails to validate user-controlled file path input, allowing authenticated attackers to delete arbitrary files via path traversal or direct file specification. Exploitation requires valid user credentials and can result in denial of service or compromise of system integrity through deletion of critical files.