beaksec personal blog
Telegram Desktop vulnerability allowed any user's file to be stolen
An unescaped separator in Telegram Desktop’s single-instance IPC lets one clicked link read arbitrary files off the disk and send them to the attacker, session files included.
- Points
- 473
- HN comments
- 329
- Submissions
- 1
- Cited by
- 0 commenters
On Hacker News
| Submitted | Title on HN | Points | Comments |
|---|---|---|---|
| Oct 10, 2026 | Telegram Desktop vulnerability allowed any user's file to be stolen by g-b-r | 473 | 329 |
