Eine Schwachstelle in Telegram Desktop ermöglicht das Senden beliebiger Dateien durch Klicken auf einen Link
Details and method of exploiting the vulnerability (CVE-2026-107181) in Telegram Desktop, the official Telegram client for desktop systems, have been revealed. The issue is caused by inadequate handling of unescaped delimiter characters in IPC commands, which allowed an attacker to transfer any files from the victim's system, including files containing session keys that can be used to hijack a Telegram account, by clicking on a sent link. […]
