medium2026-04-08 CVE-2026-39398-openclaw-claude-bridge: sandbox is not effective - `--allowed-tools ""` does not restrict available tools GHSA-7853-gqqm-vcwx