Website Bug: Bypassing 2FA Action when clearing session

Bug Reports Roblox Application and Website Bugs
,
1

MOVED TO HACKERONE

Visual Aids: (Check Private Message)
Direct Links: Log in to Roblox
Browser Information: Chrome 138 on Windows 11
Short Description: Following this method you are able to bypass 2FA in an Account, this should be patched ASAP as bad actor could easily steal your account

Expected behavior

I Should be always be prompted to Insert 2FA code

A private message is associated with this bug report (All info on hackerone)

3 Likes
2

If this is a real and pertinent security bypass report it here and you will be paid:

4 Likes
3

iirc you need to provide ID and/or be over 18 to use HackerOne

2 Likes
4

Thank you @Mmm_Wafflez

Just filled out a report on hacker one, with all the steps!

2 Likes