vm2: nesting: true bypasses require: false, allowing sandbox escape to arbitrary OS command execution (CVE-2026-44007) | HOL Guard CVE