A high-severity security vulnerability (CVE-2025-11318) exists in Tipray Data Leakage Prevention System 1.0. The flaw involves unrestricted file upload via the file uploadWxFile.do endpoint, allowing remote attackers to upload arbitrary files. The vendor has not responded to disclosure attempts, and public exploit code is available. No patch or remediation information is currently provided.