Open WebUI: SSRF Protection Bypass in Playwright Web Loader via HTTP Redirects (CVE-2026-54018) | HOL Guard CVE