One click on a tg:// link can make Telegram Desktop upload its own session files. PoC is public. https://intel.threadlinqs.com/threat/TL-2026-3119 #ThreatIntel #CVE_2026_107181 #telegram #OneClick