Nanobot contains a server-side request forgery vulnerability in the web_fetch tool (CVE-2026-49138) | HOL Guard CVE