cPanel prior to 74.0.0 allows file modification in the context of the root account because of incorrect HTTP authentication (SEC-424).
cpanel cpanel