Telegram Desktop vulnerability allowed any user's file to be stolen(beaksec.github.io)
448 points by g-b-r | 285 comments
A security research blog post describing a one-click account takeover in Telegram Desktop via an unescaped separator in its single-instance IPC, enabling arbitrary file theft.