Path Traversal in Telerik Document Processing Libraries AI Agent Tools
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 2026.3.1027
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
Telerik Document Processing Libraries, a set of .NET components for working with documents, are affected through their Convert and Merge AI agent tools. An authenticated attacker with low privileges can exploit this path traversal flaw to read and overwrite files outside the intended output directory, potentially exposing or altering sensitive data on the system.
Summarized by anthropic/claude-haiku-5.5. Verify details against the original sources.
Read the original description
In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, a path traversal vulnerability in the Convert and Merge AI agent tools allows an authenticated attacker with low privileges who can supply tool arguments to read files outside the configured output directory, and to overwrite such files where they are writable, via relative file paths that resolve against the process current working directory.
Timeline
- CVE published
- First seen by cve.now
Affected versions
- Progress Software Telerik Document Processing Libraries
From 2026.1.210 · fixed in 2026.3.1027