CVE-2026-44003vm2's Transformer Fast-Path Bypass Exposes Internal State Variablevm2's Transformer Fast-Path Bypass Exposes Internal State Variable