runc container breakout through process.cwd trickery and leaked fds (CVE-2024-21626) | HOL Guard CVE