Failure to validate uploaded files is a critical vulnerability. Attackers can upload malicious files (web shells, malware, scripts) that the server executes, leading to arbitrary code execution and full server compromise. Option B (caching headers) is unrelated to file upload security. Option C refers to a different attack. File upload validation must check file type, content, size, and destination.