https://securelayer7.net/lab/cve-2026-55157-token-optimizer-mcp-smart-user-command-injection SecureLayer7 en 2026-08-14T21:48:51.497Z CVE-2026-55157: @ooples/token-optimizer-mcp OS Command Injection via smart_user username CVE Advisory