Open WebUI: Path traversal / SSRF in terminal server proxy via encoded path traversal (CVE-2026-54017) | HOL Guard CVE