A security bug is allowing users to bypass new privacy controls introduced by Facebook-owned messaging service WhatsApp on iPhones this month, the service said on Wednesday after users posted about the problem on social media.