Telegram restricts regular bots from sending HTML components.

Telegram has restricted ordinary bots from sending HTML components, including in private chats, according to Bot API contributor Aliaksei Levin, though the platform has not fully shut down Mini Apps. One developer reported that its bot could send components during parts of November 10–13 before receiving permission errors, and the reason for the restriction and timing of a fix remain unclear. The change follows researchers' disclosure of a security vulnerability in older Telegram clients; founder Pavel Durov said the issue was fixed server-side, and researchers said the published flaw is resolved in current client versions. The restriction matters because HTML components underpin rich formatting and interactive elements in bot messages, potentially affecting bot-based interfaces and Mini Apps across Telegram. What to watch next is whether Telegram restores component permissions for ordinary bots and whether it clarifies which client versions and bot types are affected.