Open WebUI: Cross-user file disclosure via /api/chat/completions image_url field (CVE-2026-54009) | HOL Guard CVE