Open WebUI Prompt history IDOR: unbound history_id allows cross-prompt read and deletion (CVE-2026-54015) | HOL Guard CVE