Omni has a TOCTOU race condition that allows multiple concurrent uses of a single-use SAML session token (CVE-2026-45720) | HOL Guard CVE