Coolify: Missing authorization on terminal websocket bootstrap routes allows low-privileged members to execute commands on team servers (CVE-2026-34048) | HOL Guard CVE