CVE-2026-107181

How a Single Link Could Steal Your Telegram Desktop Session

Telegram Desktop before 7.2.9 passed clicked links to its running instance without escaping a separator character, letting a crafted link sm...

Anshu Pathak

Oct 10, 2026

8 min