СertiK has discovered a critical vulnerability in Telegram.
Vulnerability in multimedia processing in Telegram Desktop - attacks on user devices through specially crafted media files, such as images and videos, are possible.
In general, it is better to disable auto-downloading of files for now.