CVE-2025-52571 — Hikka vulnerable to RCE through edits in a channel
Hikka is a Telegram userbot. A vulnerability affects all users of versions below 1.6.2, including most of the forks. It allows an unauthenticated attacker to gain access to Tele…
Published: 2025-06-24 · CVSS: 9.7 · CVSS 3.1
Hikka is a Telegram userbot. A vulnerability affects all users of versions below 1.6.2, including most of the forks. It allows an unauthenticated attacker to gain access to Telegram account of a victim, as well as full access to the server. The issue is patched in version 1.6.2. No known workarounds are available.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7