Pheditor: Incomplete command sanitization in terminal feature allows RCE via pipe operator, backtick substitution, and newline injection (CVE-2026-55578) | HOL Guard CVE