Capcut Bug Bounty ^new^ Jun 2026

If you actually want to find a bounty, search for "ByteDance Security Response Center" + "CapCut" – sometimes video editors are covered under the parent company's "other products" clause.

I've found: 🔹 Auth bypass in the web editor 🔹 Insecure direct object references (IDOR) in project files 🔹 Rate-limiting gaps on the mobile API capcut bug bounty

CapCut’s security narrative is currently dominated by high-profile legal battles: TikTok | Bug Bounty Program Policy - HackerOne If you actually want to find a bounty,