{"id":"CVE-2026-106135","kind":"vulnerability","aliases":["CVE-2026-106135"],"related":[],"title":"Kendo UI for Angular Chat: XSS via openUrl quick action in messages","description":"Cross-Site Scripting (XSS) in the Chat component (@progress/kendo-angular-conversational-ui) in Progress Software Kendo UI for Angular versions prior to 25.3.0 allows a low-privileged attacker who can supply Chat messages to execute arbitrary JavaScript in another user's browser via an unsafe URL in an openUrl quick action, which runs when the user clicks the action.","summary":"The Chat component in Kendo UI for Angular (@progress/kendo-angular-conversational-ui) fails to sanitize a URL in the openUrl quick action. An attacker who can send Chat messages can run JavaScript in another user's browser when that user clicks the action.","severity":"medium","cvss":5.4,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["angular","conversational-ui","kendo-ui","package","web-frontend"],"not_affected_if":["no-chat-component","trusted-messages-only"],"how_to_check":"- Check the installed version of `@progress/kendo-angular-conversational-ui` in `package.json` and the lock file.\n- Look for uses of the Chat component that render messages with quick actions from untrusted users.","fix":"- `@progress/kendo-angular-conversational-ui` (Kendo UI for Angular): move to `25.3.0` or later","status":"open","published_at":"2026-11-06T17:17:11+00:00","first_seen_at":"2026-11-06T17:43:12+00:00","triaged_at":"2026-11-06T17:45:28+00:00","updated_at":"2026-11-06T17:45:28+00:00","category":"package","confidence":0.7,"triage":{"at":"2026-11-06T17:45:28Z","model":"claude-haiku-5-5","output":{"fix":"- `@progress/kendo-angular-conversational-ui` (Kendo UI for Angular): move to `25.3.0` or later","reach":"internet","title":"Kendo UI for Angular Chat: XSS via openUrl quick action in messages","impact":"medium","summary":"The Chat component in Kendo UI for Angular (@progress/kendo-angular-conversational-ui) fails to sanitize a URL in the openUrl quick action. An attacker who can send Chat messages can run JavaScript in another user's browser when that user clicks the action.","audience":"developers","category":"package","nicknames":[],"who_cares":["angular","kendo-ui","conversational-ui","web-frontend"],"confidence":0.7,"fix_status":"available","needs_auth":"yes","worst_case":"attacker runs JavaScript in another user's browser session","analyst_note":"","how_to_check":"- Check the installed version of `@progress/kendo-angular-conversational-ui` in `package.json` and the lock file.\n- Look for uses of the Chat component that render messages with quick actions from untrusted users.","plain_action":"","needs_analyst":false,"not_affected_if":["no-chat-component","trusted-messages-only"],"who_is_affected":"Apps built with the Kendo UI for Angular Chat component that show messages from other users and allow quick actions. Apps that do not use the Chat component, or that only show trusted content, are less exposed. The sources do not say whether the flaw needs a particular configuration beyond using openUrl quick actions.","user_interaction":"yes","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000709,"input_tokens":4272,"output_tokens":563,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-106135':15A,18A '-2026':14A,17A '25.3.0':90C 'action':10A,48B,69B,119C,127C 'allow':91C 'angular':4A,19B,37B,86C 'anoth':60B,107C 'arbitrari':104C 'attack':50B,96C 'browser':63B,110C 'chat':5A,31B,54B,77C,100C 'click':67B,125C 'compon':32B,78C 'convers':21B 'conversational-ui':20B 'cross':71C 'cross-sit':70C 'cve':13A,16A 'execut':103C 'fail':39B 'frontend':29B 'javascript':58B,105C 'kendo':1A,24B,34B,83C 'kendo-ui':23B 'low':94C 'low-privileg':93C 'messag':12A,55B,101C 'openurl':8A,46B,117C 'packag':26B 'prior':88C 'privileg':95C 'progress':81C 'progress/kendo-angular-conversational-ui':38B,79C 'quick':9A,47B,118C 'run':57B,121C 'sanit':41B 'script':73C 'send':53B 'site':72C 'softwar':82C 'suppli':99C 'ui':2A,22B,25B,35B,84C 'unsaf':113C 'url':43B,114C 'user':61B,66B,108C,124C 'version':87C 'via':7A,111C 'web':28B 'web-frontend':27B 'xss':6A,74C","nicknames":[],"mitigations":[],"who_affected":"Apps built with the Kendo UI for Angular Chat component that show messages from other users and allow quick actions. Apps that do not use the Chat component, or that only show trusted content, are less exposed. The sources do not say whether the flaw needs a particular configuration beyond using openUrl quick actions.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"developers","plain_action":null,"pkeys":[],"ptokens":[],"labels":["angular","conversationalui","kendoui","medium","package","webfrontend"],"campaign_type":null,"search_a":"'-106135':15A,18A '-2026':14A,17A 'action':10A 'angular':4A 'chat':5A 'cve':13A,16A 'kendo':1A 'messag':12A 'openurl':8A 'quick':9A 'ui':2A 'via':7A 'xss':6A","search_b":"'action':48B,69B 'angular':19B,37B 'anoth':60B 'attack':50B 'browser':63B 'chat':31B,54B 'click':67B 'compon':32B 'convers':21B 'conversational-ui':20B 'fail':39B 'frontend':29B 'javascript':58B 'kendo':24B,34B 'kendo-ui':23B 'messag':55B 'openurl':46B 'packag':26B 'progress/kendo-angular-conversational-ui':38B 'quick':47B 'run':57B 'sanit':41B 'send':53B 'ui':22B,25B,35B 'url':43B 'user':61B,66B 'web':28B 'web-frontend':27B","search_c":"'25.3.0':90C 'action':119C,127C 'allow':91C 'angular':86C 'anoth':107C 'arbitrari':104C 'attack':96C 'browser':110C 'chat':77C,100C 'click':125C 'compon':78C 'cross':71C 'cross-sit':70C 'execut':103C 'javascript':105C 'kendo':83C 'low':94C 'low-privileg':93C 'messag':101C 'openurl':117C 'prior':88C 'privileg':95C 'progress':81C 'progress/kendo-angular-conversational-ui':79C 'quick':118C 'run':121C 'script':73C 'site':72C 'softwar':82C 'suppli':99C 'ui':84C 'unsaf':113C 'url':114C 'user':108C,124C 'version':87C 'via':111C 'xss':74C","first_public_at":"2026-11-06T17:17:11+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","cvss_by":"security@progress.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-106135","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-106135","severity":null,"published_at":"2026-11-06T17:17:11+00:00","modified_at":"2026-11-06T17:17:11+00:00","first_seen_at":"2026-11-06T17:43:12+00:00","fetched_at":"2026-11-06T17:43:12+00:00","note":null}],"documents":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}