Two vulnerabilities in the photo-sharing service allowed hackers to brute-force their way into user accounts.

As shown in the video below, using brute force attacks to log in to a TikTok account rendered 2FA useless. The 2FA page is bypassed after numerous attempts to sign in.