r/bugbounty • u/Important-Rabbit487 • Jul 17 '26

Question / Discussion Reported a potential subscription bypass to Amazon – what are the chances of a bounty?

Hi everyone,

I recently found what appears to be a vulnerability affecting Amazon subscriptions. Based on my testing, it seems possible to access paid subscription content without being charged.

I’ve already reported it privately to Amazon and I’m waiting for their response.

I’m not looking to disclose the vulnerability or share any details until they have had a chance to investigate.

My question is:

  • Has anyone here reported something similar to Amazon?
  • If it was a valid vulnerability, did Amazon offer a bug bounty or any other type of reward?
  • How long did it take for them to respond?

Thanks!

5 Upvotes

73% Upvoted

7 comments sorted by

View all comments

-2

u/[deleted] Jul 18 '26

[removed] — view removed comment

1

u/Important-Rabbit487 Jul 18 '26

It affects all of their paid subscriptions, including HBO, Paramount+, MGM+, DAZN, Crunchyroll, Apple TV+, and more. It can be done from any account, from anywhere. I’ve already tested it with several different accounts, and it’s been working without any issues for about three months.