How a clicked link could empty a Telegram Desktop session
A link, two processes, and a stolen session Researchers at BeakSec have published a full walkthrough of CVE-2026-107181, a chain in Telegram Desktop that turns a single clicked link into an arbitrary file read, and from there into a full account takeover. The bug scores 8.1 on the CVSS scale. It affects Telegram Desktop through […]