cPanel before 64.0.21 allows certain file-chmod operations via /scripts/convert_roundcube_mysql2sqlite (SEC-255).Referenceshttps://documentation.cpanel.net/display/CL/64+Change+Log