Read-Only Open WebUI Users Can Modify Collaborative Documents via Socket.IO (CVE-2026-44564) | HOL Guard CVE