Telegram: Privacy-Defeating Bug in macOS App

A bug in Telegram’s macOS app made it possible to access self-destructing audio and video messages long after they disappeared from secret chats.

A researcher has found out that when a user records and sends an audio or video message via a regular chat, the application leaked the exact path where the recorded message is stored in „.mp4“ format. With the secret chat option turned on, the path information is not spilled, but the recorded message still gets stored in the same location.

Telegram has already fixed the issue.