Open WebUI has Blind Server Side Request Forgery in its Image Edit Functionality (CVE-2026-34225) | HOL Guard CVE