cPanel prior to 55.9999.141 allows ACL bypass for AppConfig applications via magic_revision (SEC-100).
cpanel cpanel