cPanel prior to 70.0.23 allows arbitrary file-chmod operations during legacy incremental backups (SEC-338).
cpanel cpanel