vm2: Sandbox Escape (CVE-2026-43997) | HOL Guard CVE