jatin-dot-py/instagram-private-bypass

This repository discloses a server-side authorization bypass in Instagram, which allowed unauthenticated access to private timelines; it seems likely that Meta patched it silently without formal acknowledgment, based on evidence.

2 best points · 0 comments · 1 Hacker News post · 191 GitHub stars · View on GitHub

Hacker News discussions

• Show HN: Instagram: Private Posts Exposed to Unauthenticated Requests (2 points, 0 comments, by jatin-dot-py, 2026-01-23)