Bybit Urges Telegram Android Users to Update Over Widget Flaw

Bybit urged Telegram users on Android to install the latest version after security group V12 disclosed a flaw in the app’s Widgets feature that it said could allow remote code execution. Bybit warned that a compromised phone could put other apps at risk.

V12 demonstrated the issue with a bot message that opened the device’s calculator app. Telegram said it had fixed the vulnerability and pushed an update to users.

Bybit advised users to avoid opening unfamiliar chats, interacting with unknown bots and clicking suspicious links. It also urged them to trust only verified official channels.