Kirby: Access to files of top-level drafts is not protected by permissions (CVE-2026-54004) | HOL Guard CVE