CVE-2026-5619: Command Injection in Braffolk mcp-summarization-functions | NextGuard