cPanel before 55.9999.141 allows arbitrary code execution because of an unsafe @INC path (SEC-97).Referenceshttps://documentation.cpanel.net/display/CL/56+Change+Log