Created ticket #33332 on Core Trac:
Default ACL entries are not set correctly when file is uploaded to WP