Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-118038— Path Traversal in Telerik Document Processing Libraries AI Agent Tools

Quick assessment

Affected
Progress Software Telerik Document Processing Libraries
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

在版本 2026.3.1027 之前的 In Progress® Telerik® 文档处理库中，Convert 和 Merge AI 代理工具存在路径遍历漏洞。该漏洞允许拥有低权限且能够提交工具参数的已认证攻击者，通过相对于进程当前工作目录解析的相对文件路径，读取配置输出目录之外的文件，并在这些文件可写时对其进行覆盖。

CVSS 7.1 · High
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-118038

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Path Traversal in Telerik Document Processing Libraries AI Agent Tools
Source: CVE Program / CVE List V5
Vulnerability Description
In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, a path traversal vulnerability in the Convert and Merge AI agent tools allows an authenticated attacker with low privileges who can supply tool arguments to read files outside the configured output directory, and to overwrite such files where they are writable, via relative file paths that resolve against the process current working directory.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
对路径名的限制不恰当(路径遍历)
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
Progress Software Telerik Document Processing Libraries 2026.1.210 ~ 2026.3.1027 -

II. Public POCs for CVE-2026-118038

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-118038

请登录查看更多情报信息。

Other References for CVE-2026-118038 (1)

Same Patch Batch · Progress Software · 2026-10-28 · 6 CVEs total

CVE-2026-118040 7.5 HIGH Improper Signature and Certificate Validation in Telerik Document Processing Libraries Rad
CVE-2026-118036 7.5 HIGH Uncontrolled Resource Consumption in Telerik Document Processing Libraries RadPdfProcessin
CVE-2026-118035 7.5 HIGH Uncontrolled Resource Consumption in Telerik Document Processing Libraries RadWordsProcess
CVE-2026-118039 7.5 HIGH XML External Entity Reference in Telerik Document Processing Libraries SVG Image Processin
CVE-2026-118037 7.5 HIGH Uncontrolled Resource Consumption in Telerik Document Processing Libraries RadSpreadProces

IV. Related Vulnerabilities

Same product: Telerik Document Processing Libraries
Same vendor: Progress Software
Same weakness: CWE-22