Incorrect access control in Jantent v1.1 allows attackers to bypass authentication and access sensitive APIs without a token.