{"id":"CVE-2026-118976","kind":"vulnerability","aliases":["CVE-2026-118976"],"related":[],"title":"Telerik UI for Blazor demo: path traversal reads server files via chat attachments","description":"In Progress® Telerik® UI for Blazor versions v11.1.0 through v14.0.0, the demo application's Chat AI Integration example contains a relative path traversal vulnerability that could allow an attacker to read files outside of the chat attachments folder that are within the server's filesystem scope.","summary":"The demo application's Chat AI Integration example in Telerik UI for Blazor versions v11.1.0 through v14.0.0 has a relative path traversal flaw. An attacker can read files outside the chat attachments folder but still within the server's filesystem scope.","severity":"high","cvss":7.5,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"Telerik UI for Blazor (demo app, Chat AI Integration example)","fixed":["14.1.0"],"affected":">= 11.1.0, <= 14.0.0","ecosystem":"nuget"}],"ecosystems":[],"tags":["blazor","demo-code","dotnet","package","path-traversal","telerik"],"not_affected_if":["demo-not-deployed","library-only-usage","upgraded-to-14.1.0+"],"how_to_check":"- Check whether your project references Telerik.UI.for.Blazor between 11.1.0 and 14.0.0 (csproj / packages.lock.json).\n- More important: check whether you copied the demo app's Chat AI Integration example (file-attachment handling) into a deployed server app; if you only use the TelerikChat component, there is no sign you are exposed.\n- Also check whether any endpoint of yours builds a file path from a chat attachment name without normalising it.","fix":"Per CVE record (Progress as CNA, via OpenCVE mirror): versions before 14.1.0 affected, so move to 14.1.0 or later (latest is 16.0.0). Unconfirmed on a Telerik page; the demo is sample code, so also fix any copy of the chat attachment file-serving code by resolving paths and rejecting anything outside the attachments folder.","status":"open","published_at":"2026-11-13T15:17:32+00:00","first_seen_at":"2026-11-13T15:46:15+00:00","triaged_at":"2026-11-13T15:48:26+00:00","updated_at":"2026-11-13T15:51:11+00:00","category":"package","confidence":0.55,"triage":{"at":"2026-11-13T15:48:26Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"internet","title":"Telerik UI for Blazor demo: path traversal reads server files via chat attachments","impact":"medium","summary":"The demo application's Chat AI Integration example in Telerik UI for Blazor versions v11.1.0 through v14.0.0 has a relative path traversal flaw. An attacker can read files outside the chat attachments folder but still within the server's filesystem scope.","audience":"developers","category":"package","nicknames":[],"who_cares":["telerik","blazor","dotnet"],"confidence":0.6,"fix_status":"unknown","needs_auth":"unknown","worst_case":"attacker reads arbitrary server files within filesystem scope","analyst_note":"Confirm from the Telerik vendor advisory whether the library itself is affected and what fixed version exists; NVD text alone gives no fix.","how_to_check":"- Check whether your project references Telerik UI for Blazor between `v11.1.0` and `v14.0.0`\n- Check whether you deployed the Chat AI Integration demo code on a server\n- unknown for other checks","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["library-only-usage","demo-not-deployed"],"who_is_affected":"Only applications built from the Telerik UI for Blazor demo app's Chat AI Integration example are described as exposed; the flaw is in the demo code, not the library itself. Teams that never copied or deployed that demo can likely skip it. The sources do not say whether the library's own components are affected.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"yes","severity_if_unknown":"high"},"cost_usd":0.000743,"input_tokens":4560,"output_tokens":574,"severity_before":"high"},"analyst_status":"done","analyst_note":"Confirm from the Telerik vendor advisory whether the library itself is affected and what fixed version exists; NVD text alone gives no fix.","search":"'-118976':16A,19A '-2026':15A,18A 'ai':27A,45B,96C 'allow':107C 'app':25A 'applic':42B,93C 'attach':13A,71B,117C 'attack':64B,109C 'blazor':4A,23A,30B,52B,86C 'chat':12A,26A,44B,70B,95C,116C 'code':33B 'contain':99C 'could':106C 'cve':14A,17A 'demo':5A,24A,32B,41B,92C 'demo-cod':31B 'dotnet':34B 'exampl':47B,98C 'example':29A 'file':10A,67B,112C 'filesystem':79B,125C 'flaw':62B 'folder':72B,118C 'for':22A 'integr':46B,97C 'integration':28A 'outsid':68B,113C 'packag':35B 'path':6A,37B,60B,102C 'path-travers':36B 'progress':82C 'read':8A,66B,111C 'relat':59B,101C 'scope':80B,126C 'server':9A,77B,123C 'still':74B 'telerik':1A,20A,39B,49B,83C 'travers':7A,38B,61B,103C 'ui':2A,21A,50B,84C 'v11.1.0':54B,88C 'v14.0.0':56B,90C 'version':53B,87C 'via':11A 'vulner':104C 'within':75B,121C","nicknames":[],"mitigations":[],"who_affected":"Only applications built from the Telerik UI for Blazor demo app's Chat AI Integration example are described as exposed; the flaw is in the demo code, not the library itself. Teams that never copied or deployed that demo can likely skip it. The sources do not say whether the library's own components are affected.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"unknown","audience":"developers","plain_action":null,"pkeys":["telerikuiforblazordemoappchataiintegrationexample"],"ptokens":["ai","app","blazor","chat","demo","example","for","integration","telerik","ui"],"labels":["blazor","democode","dotnet","high","package","pathtraversal","telerik"],"campaign_type":null,"search_a":"'-118976':16A,19A '-2026':15A,18A 'ai':27A 'app':25A 'attach':13A 'blazor':4A,23A 'chat':12A,26A 'cve':14A,17A 'demo':5A,24A 'example':29A 'file':10A 'for':22A 'integration':28A 'path':6A 'read':8A 'server':9A 'telerik':1A,20A 'travers':7A 'ui':2A,21A 'via':11A","search_b":"'ai':45B 'applic':42B 'attach':71B 'attack':64B 'blazor':30B,52B 'chat':44B,70B 'code':33B 'demo':32B,41B 'demo-cod':31B 'dotnet':34B 'exampl':47B 'file':67B 'filesystem':79B 'flaw':62B 'folder':72B 'integr':46B 'outsid':68B 'packag':35B 'path':37B,60B 'path-travers':36B 'read':66B 'relat':59B 'scope':80B 'server':77B 'still':74B 'telerik':39B,49B 'travers':38B,61B 'ui':50B 'v11.1.0':54B 'v14.0.0':56B 'version':53B 'within':75B","search_c":"'ai':96C 'allow':107C 'applic':93C 'attach':117C 'attack':109C 'blazor':86C 'chat':95C,116C 'contain':99C 'could':106C 'demo':92C 'exampl':98C 'file':112C 'filesystem':125C 'folder':118C 'integr':97C 'outsid':113C 'path':102C 'progress':82C 'read':111C 'relat':101C 'scope':126C 'server':123C 'telerik':83C 'travers':103C 'ui':84C 'v11.1.0':88C 'v14.0.0':90C 'version':87C 'vulner':104C 'within':121C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-13T15:17:32+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss_by":"security@progress.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-118976","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-118976","severity":null,"published_at":"2026-11-13T15:17:32+00:00","modified_at":"2026-11-13T15:17:32+00:00","first_seen_at":"2026-11-13T15:46:15+00:00","fetched_at":"2026-11-13T15:46:15+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-118976:3899","url":"https://app.opencve.io/cve/CVE-2026-118976","severity":null,"published_at":"2026-11-13T15:51:11+00:00","modified_at":"2026-11-13T15:51:11+00:00","first_seen_at":"2026-11-13T15:51:11+00:00","fetched_at":"2026-11-13T15:51:11+00:00","note":"No Telerik/Progress advisory found (tried likely KB URLs, search). CNA data via OpenCVE mirror lists 11.1.0 affected, < 14.1.0; not vendor-page confirmed so nothing verified. Flaw is in the demo app's Chat AI Integration example, not the shipped components.","cites":["https://app.opencve.io/cve/CVE-2026-118976"]}],"documents":[{"id":147284,"url":"https://app.opencve.io/cve/CVE-2026-118976","title":"OpenCVE: CVE-2026-118976 (CNA record mirror)","kind":"other","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"describes","confidence":null,"note":null}],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}