<p>Unauthenticated intruders can mint admin tokens, and exposed servers are already being hit</p>