---
id: "CVE-2026-118038"
kind: "vulnerability"
aliases: ["CVE-2026-118038"]
title: "Telerik Document Processing: AI agent tools allow file read and overwrite"
severity: "high"
cvss: 7.1
epss: null
exploited: false
status: "open"
category: "ai-tooling"
products: []
ecosystems: []
tags: ["ai-agents", "ai-tooling", "dotnet", "nuget", "telerik"]
not_affected_if: ["fixed-version", "no-ai-agent-tools"]
published_at: "2026-10-28T13:17:06+00:00"
first_seen_at: "2026-10-28T13:33:01+00:00"
updated_at: "2026-10-28T13:34:16+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-118038", "first_seen_at": "2026-10-28T13:33:01+00:00"}]
---

# Telerik Document Processing: AI agent tools allow file read and overwrite

The Convert and Merge AI agent tools in Telerik Document Processing Libraries resolve relative file paths against the process working directory, so path traversal is possible. An authenticated low-privilege user who can supply tool arguments can read files outside the configured output directory and overwrite writable ones.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the Telerik.Documents or Telerik Document Processing package version referenced in your project files (.csproj, packages.config, or Directory.Packages.props) and see whether it is below `2026.3.1027`.
- Check whether the Convert and Merge AI agent tools are exposed to users or to an LLM agent in your application.

## Fix

- Upgrade Telerik Document Processing Libraries to `2026.3.1027` or later.

## Timeline

- 2026-10-28T13:33:01+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-118038

## From the sources

In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, a path traversal vulnerability in the Convert and Merge AI agent tools allows an authenticated attacker with low privileges who can supply tool arguments to read files outside the configured output directory, and to overwrite such files where they are writable, via relative file paths that resolve against the process current working directory.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_