install -D: symlink race in directory creation allows arbitrary file overwrite (CVE-2026-35356) | HOL Guard CVE