backport guest-to-host file upload vuln fix.