{
    "author": null,
    "date_published": "2026-10-03T08:00:00.000Z",
    "dek": null,
    "direction": "ltr",
    "domain": "beaksec.github.io",
    "excerpt": "An unescaped separator in Telegram Desktop\u2019s single-instance IPC lets one clicked link read arbitrary files off the disk and send them to the attacker, session files included.",
    "lead_image_url": "https://beaksec.github.io/assets/img/posts/telegram-desktop-one-click-account-takeover/cover.png",
    "next_page_url": null,
    "rendered_pages": 1,
    "title": "Telegram Desktop: one-click account takeover via IPC injection",
    "total_pages": 1,
    "url": "https://beaksec.github.io/posts/telegram-desktop-one-click-account-takeover/",
    "word_count": 2553
}