Telegram vulnerability dispute prompts Bybit warning
Bybit urged users to update Telegram for Android after reports of a vulnerability, while Telegram's founder says the alleged remote code execution flaw doesn't exist.
Confirmed
- Bybit issued an advisory on Nov 13 urging users to update Telegram for Android
- Bybit warns a compromised device could put other apps at risk
Not yet known
- Whether the alleged remote code execution flaw in Telegram exists; Durov says it does not
- Whether the flaw requires starting a third-party service, as Durov says
- Whether any bot can send the message type a critic says could trigger the flaw
What we know
Bybit issued an advisory on Nov 13 warning that a compromised device could put other apps at risk. Telegram's Durov said the alleged RCE issue doesn't exist, requires starting a third-party service and is patched server-side; a critic disputes this, saying any bot can send the message type.
Photos and descriptions: Wikipedia
What people are posting
Posts on X this story draws on. They are individual users' views and have not been verified by Global Eye 24.
“Bybit Warns of Telegram Android Vulnerability, Urges Users to Update Immediately”
View post →“any bot can send you this message type”
View post →By the Global Eye 24 desk, with AI assistance. Updated as the story develops. Spot an error? Write to corrections@globaleye24.com.