high2026-05-07 mcp-ssh-tool has file transfer path policy bypass and bearer token comparison hardening GHSA-j7h9-2jh7-g967