CVE-2026-40354: Symlink Trash Vulnerability in xdg-desktop-portal | NextGuard