СertiK has discovered a critical vulnerability in Telegram.

Vulnerability in multimedia processing in Telegram Desktop - attacks on user devices through specially crafted media files, such as images and videos, are possible.

In general, it is better to disable auto-downloading of files for now.