langflow: /profile_pictures/{folder_name}/{file_name} endpoint file reading (CVE-2026-33497) | HOL Guard CVE