Telegram Desktop was disclosed with a high-severity vulnerability, reportedly 7.2.9 fixed it
BIBIBI
AT A GLANCE
A security researcher said that Telegram Desktop 7.2.8 and earlier versions have a vulnerability exploitable through malicious links.
Article
Telegram Desktop High-severity vulnerability exposed: clicking a malicious link can steal any local files and sessions in one click; crypto community users are advised to update immediately
BlockBeats reported that October 9, security researcher beaksec (Emiliano Versini), recently disclosed that Telegram Desktop has a high-severity vulnerability (CVE-2026-107181), affecting 7.2.8 and earlier versions. Attackers can craft malicious tg:// links; after users click them in a browser or other external application, they can use IPC injection to read any local files (including tdata session files) and send them to an attacker-controlled channel, potentially leading to account takeover. The vulnerability was fixed in version 7.2.9.
Because many projects, communities, and trading groups in the crypto community rely on Telegram, sensitive information such as wallet seed phrases, private-key screenshots, and transaction records is often stored locally. Please check and update Telegram Desktop to the latest version immediately, do not click unfamiliar links indiscriminately, and consider enabling local password protection for sessions to reduce the risk of theft.
Original link https://m.theblockbeats.info/flash/371014
Key points
01
BlockBeats reported that security researcher beaksec (Emiliano Versini) disclosed that Telegram Desktop has a high-severity vulnerability CVE-2026-107181。
02
Reportedly,Telegram Desktop 7.2.8 and earlier versions are affected; the vulnerability was fixed in 7.2.9.
03
Reportedly, attackers can craft malicious tg:// links; after users click them from a browser or other external application, they may use IPC injection to read any local files, including tdata session files, and send them to an attacker-controlled channel.
04
The original report stated that the vulnerability could lead to account takeover.
05
The original report recommended that users update Telegram Desktop, avoid clicking unfamiliar links, and enable local password protection for sessions.
AI-assisted interpretation
The following is analysis, separate from reported facts. Verify important claims independently.
This is a vulnerability warning: if the relevant description is accurate, users of older versions of Telegram Desktop may have their local files and session information read after clicking malicious tg:// links. The evidence comes from BlockBeats' account of a security researcher and does not yet include a vendor statement or independent reproduction materials.
Why it matters to readers
Telegram Desktop Users' local files and session information may affect account security; the original report also mentioned that sensitive information such as wallet seed phrases, private-key screenshots, and transaction records may be stored locally.
If you use Telegram Desktop, check the version and update to the latest version, and avoid clicking unfamiliar links; do not conclude solely from this report that you have already been attacked.
Risks and unknowns
The evidence does not include confirmation from Telegram regarding CVE-2026-107181.
The evidence does not include publicly available vulnerability reproduction details or independent verification results.
The evidence does not state the actual number of affected users or provide any cases of account takeover or asset losses.
The evidence does not clearly state whether 7.2.9 was distributed to all users through automatic updates.
Related Developments
Loading event timeline…
Related concepts
CVE
This term is not in the glossary yet. Browse related concepts in the glossary.
