OpenHands is Vulnerable to Command Injection through its Git Diff Handler (CVE-2026-33718) | HOL Guard CVE