OpenStack Ironic allows file overwrite via directory traversal during deployment with a crafted ISO image (CVE-2026-48681) | HOL Guard CVE