A recently-discovered flaw in Facebook allows users to view private photos of other users, with the “abuse reporting” tool—including photos of Facebook founder Mark Zuckerberg.
When users reported a public Facebook photo for abuse, they could access other non-public photos for the same user they were reporting.
However, the problem has been fixed.
A Facebook spokesperson has said that the bug “was discovered in one of our reporting flows” that allowed users to report multiple instances of inappropriate content. Before being fixed, the code was live “for a limited period of time” and affected an unspecified limited number of users.