Telegram Desktop vulnerability allowed any user's file to be stolen

A vulnerability in Telegram Desktop (versions through 7.2.8) allowed attackers to steal any user's files and take over their account by sending a crafted link. When a user clicked the malicious link, it exploited a flaw in how Telegram's Desktop client handles inter-process communication over local sockets, combined with an unprotected internal file-reading command that lacked authentication checks. The vulnerability was fixed in version 7.2.9.