Telegram Desktop Vulnerability Allowed File Theft

A recently discovered vulnerability in Telegram Desktop versions prior to 7.2.9 has put users at risk of file theft. This issue allows attackers to steal files from a user's computer with a single click on a malicious link, without requiring any user confirmation.

Impact on Mini App and Bot Founders

Mini app and bot developers should be aware of the following implications:

• User Security: This vulnerability highlights the importance of user security in applications. Developers may need to reassess how their bots handle external links and user data.
• Trust and Reputation: The incident could affect users' trust in Telegram, which may lead to reduced engagement with bots and mini apps if users feel insecure.
• Prompt Updates: Developers should encourage users to update to the latest version of Telegram Desktop to mitigate risks.

"A vulnerability in Telegram Desktop versions before 7.2.9 allowed attackers to steal files from a user's computer with a single click on a malicious link."

For further details on the attack and protective measures, you can visit Durov's Code.

Source: Telegram Post