ATTENTION! The vulnerability in Telegram Desktop can only lead to file theft via a link and account takeover!

ATTENTION! The vulnerability in Telegram Desktop can only lead to file theft and account takeover via a link! The CVE-2026-107181 vulnerability identified in the Telegram Desktop application may allow an attacker to access the user's local files, including account session data, through a specific link. An open Proof of Concept (PoC) has been released for exploiting this vulnerability. Users are advised to update their software to version 7.2.9 or later. General information about the vulnerability In October 2026, information was disclosed regarding a security vulnerability in the Telegram Desktop application that could lead to unauthorized access to local files on the user's device and account takeover under certain conditions. This vulnerability, registered with the identifier CVE-2026-107181, is rated as High risk (8.6) according to CVSS 4.0 criteria. Experts published a technical analysis of this vulnerability on October 3, 2026, and updated it on October 7. The CVE identifier for the vulnerability was also assigned on October 7. The release of an open PoC material demonstrates that exploiting the vulnerability is technically possible, but this in itself does not mean that real