TikTok · Report #2921830
Unauthorized Access to Private Video Description via Translation API for Private Accounts
Validstatus
lowseverity
82upvotes
27 Jun 2025disclosed
Summary
A vulnerability was discovered in the TikTok translation API endpoint that could have allowed unauthorized access to video descriptions contained in private accounts. We thank @z3phyrus for reporting this to our team.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.