{ads}

›

Telegram Desktop Flaw Lets Hidden JavaScript Exfiltrate Messages From HTML Exports

Written By Monday, 14 September 2026 Add Comment



September 14, 2026 at 11:28PM

A flaw in Telegram Desktop let a bot's message plant hidden JavaScript inside chats that users exported to HTML files, security researchers at ExPatch said in a writeup published on September 12. In Telegram, the message looked ordinary, with a link button, and the script ran only when someone opened the export file in a web browser. It could then copy every message in that file to

from The Hacker News https://ift.tt/atzbJfM

0 Response to "Telegram Desktop Flaw Lets Hidden JavaScript Exfiltrate Messages From HTML Exports"

Post a Comment

Subscribe to: Post Comments (Atom)

Article Top Ads

Central Ads Article 1

Middle Ads Article 2

Article Bottom Ads