CloudPanel 2 before 2.3.1 is vulnerable to authentication bypass due to insecure file-manager cookie authentication, which may lead to remote code execution. This signature indicates possible attempt to set suspicious permission to a file post exploiting authentication bypass vulnerability.