vLLM has Hardcoded Trust Override in Model Files Enables RCE Despite Explicit User Opt-Out (CVE-2026-27893) | HOL Guard CVE