A bug in TikTok allowed hackers to take control of high-profile accounts through a zero-click account takeover exploit.