Arbitrary file delete vulnerability in method ugw-delete-file

A feature that deletes files doesn't properly check what files users are allowed to delete, letting attackers with regular user access remove important system files they shouldn't touch.

The ugw-delete-file method fails to validate or restrict file paths provided by authenticated users, allowing path traversal attacks to delete arbitrary files on the system. An attacker with valid user credentials can exploit insufficient input validation to access and remove files outside intended directories.