Back to directory
WRITEUP #6572

I Found a Bug That Exposed Private Instagram Posts to Anyone.

Auth Bypass
by@JatinBanga18(Jatin Banga)
Program
MetaInstagram
Published
Jan 26, 2026
Added to HackDex
Mar 12, 2026
Read Full Writeuphttps://infosecwriteups.com/i-found-a-bug-that-exposed-private-instagram-posts-to-anyone-eebb7923f7e3
RELATED WRITEUPS
Interesting Story of an Account Takeover Vulnerability
Auth BypassAccount takeover
Instagram and Meta 2FA Bypass by Unprotected Backup Code Retrieval in Accounts Center
Auth Bypass2FA / MFA bypass
Forced SSO Session Fixation
Auth BypassSSO
Account takeover on 8 years old public program
Auth BypassAccount takeover
Breaking the Barrier: Admin Panel Takeover Worth $3500
Auth BypassAuthentication bypass

Built with ❤️ by Shubham Rawat