CVE-2026-58431 Public-only API token restriction is not enforced on team API routes

Public-only API token restriction is not enforced on team API routes...