logo

Researcher reveals evidence of private Instagram profiles leaking photos

ID: 040b94ec-b043-5869-a82c-74fdf456540c

STIX ID: report--040b94ec-b043-5869-a82c-74fdf456540c

Feed Name: Bleeping Computer

Threat Score
40/100

Date Published: 2026-01-31

Date Updated: 2026-04-20

Author: Ax Sharma

...
...

A security researcher discovered that Instagram sometimes embedded links to private photos and captions in the HTML responses of private profiles when accessed with certain mobile user-agents, effectively leaking private content to unauthenticated visitors; the researcher published PoC evidence, reported the issue to Meta, and observed the behavior stop after reporting, while Meta later marked the issue as unreproducible.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.