India's CERT-In has identified a serious security vulnerability in WhatsApp that could allow hackers to fully control user accounts without needing passwords or SIM swaps.