A serious vulnerability in Instagram allowed attackers to access private photos and captions without authentication.