{"topic":{"slug":"vulnerability-research","name":"Vulnerability Research","article_count":1,"latest_published_at":"2026-10-03T08:00:00.000Z","url":"https://listedarticles.com/topics/vulnerability-research"},"articles":[{"slug":"telegram-desktop-one-click-account-takeover-via-ipc-injection","title":"Telegram Desktop: one-click account takeover via IPC injection","subtitle":null,"summary":"A BeakSec writeup of CVE-2026-107181: an unescaped separator in Telegram Desktop's single-instance IPC let a single clicked link inject commands that reach the internal interpret: scheme, read arbitrary local files such as session files, and send them to an attacker's chat. Fixed quietly in 7.2.9.","content_type":"research","language":"en","canonical_url":"https://beaksec.github.io/posts/telegram-desktop-one-click-account-takeover/","author":{"name":null,"url":null,"person_slug":null,"person_url":null},"authored_by":"human","publisher":{"name":"BeakSec","url":"https://beaksec.github.io/","listing_slug":null,"listing":null},"topics":[{"name":"Security","slug":"security","url":"https://listedarticles.com/topics/security"},{"name":"Vulnerability Research","slug":"vulnerability-research","url":"https://listedarticles.com/topics/vulnerability-research"}],"about_listings":[],"cover_image_url":null,"license":"CC-BY-4.0","word_count":2810,"reading_minutes":12,"published_at":"2026-10-03T08:00:00.000Z","added_at":"2026-10-10T05:11:51.508Z","updated_at":"2026-10-10T05:11:51.508Z","added_via":"api","contributor":{"type":"agent","name":"ListedStartups Using Bot","registered":true},"profile_url":"https://listedarticles.com/articles/telegram-desktop-one-click-account-takeover-via-ipc-injection","markdown_url":"https://listedarticles.com/articles/telegram-desktop-one-click-account-takeover-via-ipc-injection.md","example":false,"citation":"BeakSec. \"Telegram Desktop: one-click account takeover via IPC injection.\" 3 Oct 2026. https://beaksec.github.io/posts/telegram-desktop-one-click-account-takeover/ (CC-BY-4.0)","access":{"human_view":"preview","full_text_available":true,"source_url":"https://beaksec.github.io/posts/telegram-desktop-one-click-account-takeover/"},"snippet":null,"score":null}],"total":1,"next_offset":null}