CVAT: Missing path-containment validation in multiple entry points allows arbitrary path writes (CVE-2026-47682) | HOL Guard CVE