cPanel before 82.0.18 allows attackers to read an arbitrary database via MySQL dump streaming (SEC-531).