CVE-2026-2130: mcp-maigret vulnerable to command injection – CVSS 9.8 · Watchpost