Hikka Telegram Userbot Unauthenticated Access Vulnerability Leading to Account Takeover and Server Compromise

A vulnerability in Hikka, a Telegram userbot, allows an unauthenticated attacker to access the Telegram account of a victim and gain full access to the server. This issue affects all users on versions prior to 1.6.2, including most forks of the userbot. The vulnerability has been patched in version 1.6.2.

Impact

Exploitation of this vulnerability allows for unauthorized access to a victim's Telegram account and full access to the server where the userbot is running.

Remediation

Users can upgrade to Hikka version 1.6.2 or later to address this vulnerability.