Skip to content
CVE PROGRAM SOURCE RECORD9.7 Critical

CVE-2025-52571

Hikka vulnerable to RCE through edits in a channel

Description

Hikka is a Telegram userbot. A vulnerability affects all users of versions below 1.6.2, including most of the forks. It allows an unauthenticated attacker to gain access to Telegram account of a victim, as well as full access to the server. The issue is patched in version 1.6.2. No known workarounds are available.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

hikariatama Hikka

  • < 1.6.2affected

References