Docker: Race condition in docker cp allows creation of arbitrary empty files on the host via symlink swap (CVE-2026-41568) | HOL Guard CVE