Insecure Default Domain Allowlist in Splunk AI Toolkit (CVE-2026-20265) | HOL Guard CVE