CVE-2026-43978wger: Privilege escalation via trainer-login session chaining allows gym trainer to impersonate gym managerwger: Privilege escalation via trainer-login session chaining allows gym trainer to impersonate gym manager