{"id":"CVE-2026-118038","kind":"vulnerability","aliases":["CVE-2026-118038"],"related":[],"title":"Telerik Document Processing: AI agent tools allow file read and overwrite","description":"In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, a path traversal vulnerability in the Convert and Merge AI agent tools allows an authenticated attacker with low privileges who can supply tool arguments to read files outside the configured output directory, and to overwrite such files where they are writable, via relative file paths that resolve against the process current working directory.","summary":"The Convert and Merge AI agent tools in Telerik Document Processing Libraries resolve relative file paths against the process working directory, so path traversal is possible. An authenticated low-privilege user who can supply tool arguments can read files outside the configured output directory and overwrite writable ones.","severity":"high","cvss":7.1,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["ai-agents","ai-tooling","dotnet","nuget","telerik"],"not_affected_if":["fixed-version","no-ai-agent-tools"],"how_to_check":"- Check the Telerik.Documents or Telerik Document Processing package version referenced in your project files (.csproj, packages.config, or Directory.Packages.props) and see whether it is below `2026.3.1027`.\n- Check whether the Convert and Merge AI agent tools are exposed to users or to an LLM agent in your application.","fix":"- Upgrade Telerik Document Processing Libraries to `2026.3.1027` or later.","status":"open","published_at":"2026-10-28T13:17:06+00:00","first_seen_at":"2026-10-28T13:33:01+00:00","triaged_at":"2026-10-28T13:34:16+00:00","updated_at":"2026-10-28T13:34:16+00:00","category":"ai-tooling","confidence":0.7,"triage":{"at":"2026-10-28T13:34:16Z","model":"claude-haiku-5-5","output":{"fix":"- Upgrade Telerik Document Processing Libraries to `2026.3.1027` or later.","reach":"unknown","title":"Telerik Document Processing: AI agent tools allow file read and overwrite","impact":"high","summary":"The Convert and Merge AI agent tools in Telerik Document Processing Libraries resolve relative file paths against the process working directory, so path traversal is possible. An authenticated low-privilege user who can supply tool arguments can read files outside the configured output directory and overwrite writable ones.","category":"ai-tooling","nicknames":[],"who_cares":["dotnet","nuget","telerik","ai-agents"],"confidence":0.7,"needs_auth":"yes","worst_case":"Attacker reads or overwrites files outside the output directory.","analyst_note":"","how_to_check":"- Check the Telerik.Documents or Telerik Document Processing package version referenced in your project files (.csproj, packages.config, or Directory.Packages.props) and see whether it is below `2026.3.1027`.\n- Check whether the Convert and Merge AI agent tools are exposed to users or to an LLM agent in your application.","needs_analyst":false,"not_affected_if":["fixed-version","no-ai-agent-tools"],"who_is_affected":"Applications that use Telerik Document Processing Libraries before `2026.3.1027` and expose the Convert and Merge AI agent tools to users or to an agent that accepts tool arguments from them are exposed. Teams that do not use those AI agent tools, or that run only versions at or above `2026.3.1027`, can skip it.","user_interaction":"no","needs_special_setup":"yes","severity_if_unknown":"unknown"},"cost_usd":0.001064,"input_tokens":3348,"output_tokens":1458,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-118038':14A,17A '-2026':13A,16A '2026.3.1027':85C 'agent':5A,20B,32B,96C 'ai':4A,19B,22B,31B,95C 'ai-ag':18B 'ai-tool':21B 'allow':7A,98C 'argument':63B,109C 'attack':101C 'authent':54B,100C 'configur':69B,115C 'convert':28B,92C 'current':136C 'cve':12A,15A 'directori':47B,71B,117C,138C 'document':2A,36B,79C 'dotnet':24B 'file':8A,41B,66B,112C,122C,129C 'librari':38B,81C 'low':56B,103C 'low-privileg':55B 'merg':30B,94C 'nuget':25B 'one':75B 'output':70B,116C 'outsid':67B,113C 'overwrit':11A,73B,120C 'path':42B,49B,87C,130C 'possibl':52B 'prior':82C 'privileg':57B,104C 'process':3A,37B,45B,80C,135C 'progress':77C 'read':9A,65B,111C 'relat':40B,128C 'resolv':39B,132C 'suppli':61B,107C 'telerik':1A,26B,35B,78C 'tool':6A,23B,33B,62B,97C,108C 'travers':50B,88C 'user':58B 'version':84C 'via':127C 'vulner':89C 'work':46B,137C 'writabl':74B,126C","nicknames":[],"mitigations":[],"who_affected":"Applications that use Telerik Document Processing Libraries before `2026.3.1027` and expose the Convert and Merge AI agent tools to users or to an agent that accepts tool arguments from them are exposed. Teams that do not use those AI agent tools, or that run only versions at or above `2026.3.1027`, can skip it.","tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-28T13:17:06+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N","cvss_by":"security@progress.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-118038","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-118038","severity":null,"published_at":"2026-10-28T13:17:06+00:00","modified_at":"2026-10-28T13:17:06+00:00","first_seen_at":"2026-10-28T13:33:01+00:00","fetched_at":"2026-10-28T13:33:01+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}