Open WebUI: Cross-user file content disclosure via request-scoped direct model knowledge metadata (CVE-2026-70487) | HOL Guard CVE