Telegram Desktop Stored XSS Flaw Lets Attackers Steal Entire Chat Histories
Tue Sep 15 2026
Privacy
Social Media
Vulnerability
cyberpress.org
A stored cross-site scripting vulnerability in Telegram Desktop’s HTML chat-export feature could let attackers steal the contents of exported conversations. The flaw, tracked internally through Telegram Desktop’s source repository but not assigned a CVE, affected exports generated before Beta version 6.9.4 and stable version 7.0.1. ExPatch Vulnerability Research disclosed the issue after Telegram patched the […]
The post Telegram Desktop Stored XSS Flaw Lets Attackers Steal Entire Chat Histories appeared first on Cyber Security News.