Pi Agent: Predictable temporary extension install paths allow local privilege escalation on shared Linux hosts (CVE-2026-54328) | HOL Guard CVE