File Browser: Cross-user unauthorized share-link deletion via unbounded prefix match in DeleteWithPathPrefix (CVE-2026-54097) | HOL Guard CVE