cPanel prior to 68.0.15 can perform unsafe file operations because Jailshell does not set the umask (SEC-315).
cpanel cpanel