New Facebook bug may have exposed unposted photos from 6.8 million users

'When someone gives permission for an app to access their photos on Facebook, we usually only grant the app access to photos people share on their timeline,' engineering director Tomer Bar says in a message to developers