CVE-2026-61536Banks: Unsafe importlib.import_module of attacker-controlled Tool.import_path in CompletionExtension allows RCEBanks: Unsafe importlib.import_module of attacker-controlled Tool.import_path in CompletionExtension allows RCE