Token Injection Vulnerability Allows LLMs to Bypass Safety Guardrails