CVE-2026-58431

Public-only API token restriction is not enforced on team API routes...