medium2026-06-10 CVE-2026-47751-Claude Code Action: Malicious MCP Server Configuration in PRs Enables Remote Code Execution and Secret Exfiltration GHSA-8q5r-mmjf-575q