I've never used CF so someone correct me if I'm wrong but I just read that code as rendering the navigation bar in the members area?

Also if you check out my reply below I've C&P'ed the chat logs where he claims it is a zero day:

https://news.ycombinator.com/item?id=5552992

Plus another commenter has linked to a security advisory for exploits in CF that was issued a few days ago.