You can bypass TikTok’s MFA by logging in via a browser | ZDNet

The lapse in TikTok’s MFA implementation opens the door for scenarios where by a destructive risk actor could bypass MFA by logging into an account with compromised credentials by using its web page.