CVE-2026-107181— Telegram Desktop before 7.2.9 IPC Record Injection File Exfiltration via interpret: Scheme
Quick assessment
Affected
Telegram Telegram Desktop
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
在 Telegram Desktop 7.2.9 之前的版本中，Core::Sandbox 存在一个 IPC（进程间通信）记录分隔符注入漏洞。远程攻击者可以通过构造包含未转义分号的 tg:// 链接，注入 OPEN: 记录。攻击者可借此触发 interpret: 协议处理器，将本地文件（包括 tdata 会话密钥）上传至攻击者控制的频道，从而实现账户接管。
In-the-Wild Activity Observed
github_trending · high
Possible ATT&CK Techniques 2 AI
T1005 · Data from Local System T1190 · Exploit Public-Facing ApplicationAffected Version Matrix 2
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Telegram | Telegram Desktop | < 7.2.9 |
affected |
7.2.9 |
unaffected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-107181
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Telegram Desktop before 7.2.9 IPC Record Injection File Exfiltration via interpret: Scheme
Source: CVE Program / CVE List V5
Vulnerability Description
Telegram Desktop before 7.2.9 contains an IPC record-separator injection vulnerability in Core::Sandbox that allows remote attackers to inject OPEN: records via crafted tg:// links containing unescaped semicolons. Attackers can reach the interpret: scheme handler to upload local files, including tdata session keys, to an attacker channel, enabling account takeover.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
记录分隔符转义处理不恰当
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Telegram | Telegram Desktop | 0 ~ 7.2.9 | - |
|
II. Public POCs for CVE-2026-107181
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-107181
请登录查看更多情报信息。
Patches & Fixes for CVE-2026-107181 (3)
-
-
🔗 Release v 7.2.9 · telegramdesktop/tdesktop · GitHub release-notes
-
Vendor Advisories for CVE-2026-107181 (1)
Security Blog Posts for CVE-2026-107181 (1)
-
🔗 Telegram Desktop: one-click account takeover via IPC injection | beaksec Read full article technical-description exploit
Vendor Pages for CVE-2026-107181 (1)
IV. Related Vulnerabilities
V. Comments for CVE-2026-107181
No comments yet