vLLM affected by RCE via auto_map dynamic module loading during model initialization (CVE-2026-22807) | HOL Guard CVE