{"id":"CVE-2026-119102","kind":"vulnerability","aliases":["CVE-2026-119102"],"related":[],"title":"Telerik UI for Blazor: AI command filters bypass column allowlist on Grid","description":"In Telerik UI for Blazor, versions v12.0.0 through 15.2.0, an improper input validation vulnerability exists, where the Grid, TreeList and Gantt's AI command filters on any model property, bypassing the declared column allowlist.","summary":"In Telerik UI for Blazor versions 12.0.0 through 15.2.0, the Grid, TreeList and Gantt AI command filters accept any model property, ignoring the declared column allowlist. An attacker who can drive those AI filter commands can query data fields the developer meant to hide.","severity":"medium","cvss":6.5,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["blazor","dotnet","package","telerik-ui"],"not_affected_if":["ai-filters-disabled","other-ui-library"],"how_to_check":"- Check the installed Telerik.UI.for.Blazor package version in the project file or `dotnet list package`\n- Look for Grid, TreeList or Gantt components with AI command filtering enabled","fix":null,"status":"open","published_at":"2026-11-13T15:17:32+00:00","first_seen_at":"2026-11-13T15:46:15+00:00","triaged_at":"2026-11-13T15:48:55+00:00","updated_at":"2026-11-13T15:48:55+00:00","category":"package","confidence":0.5,"triage":{"at":"2026-11-13T15:48:55Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"unknown","title":"Telerik UI for Blazor: AI command filters bypass column allowlist on Grid","impact":"medium","summary":"In Telerik UI for Blazor versions 12.0.0 through 15.2.0, the Grid, TreeList and Gantt AI command filters accept any model property, ignoring the declared column allowlist. An attacker who can drive those AI filter commands can query data fields the developer meant to hide.","audience":"developers","category":"package","nicknames":[],"who_cares":["blazor","telerik-ui","dotnet"],"confidence":0.5,"fix_status":"unknown","needs_auth":"unknown","worst_case":"unauthorized model properties readable through filtered grid queries","analyst_note":"Confirm fixed version and whether AI command filters are on by default, via the Telerik release notes or NVD entry CVE-2026-119102.","how_to_check":"- Check the installed Telerik.UI.for.Blazor package version in the project file or `dotnet list package`\n- Look for Grid, TreeList or Gantt components with AI command filtering enabled","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["ai-filters-disabled","other-ui-library"],"who_is_affected":"Applications built with Telerik UI for Blazor versions 12.0.0 through 15.2.0 that use the Grid, TreeList or Gantt AI command filters. The sources do not say whether the AI filter feature is on by default, so teams should confirm whether they enabled it. Teams not using these components or the AI filters can skip it.","user_interaction":"unknown","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000747,"input_tokens":4545,"output_tokens":585,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-119102':15A,18A '-2026':14A,17A '12.0.0':31B '15.2.0':33B,77C 'accept':42B 'ai':5A,39B,57B,91C 'allowlist':10A,50B,102C 'attack':52B 'blazor':4A,19B,29B,73C 'bypass':8A,98C 'column':9A,49B,101C 'command':6A,40B,59B,92C 'cve':13A,16A 'data':62B 'declar':48B,100C 'develop':65B 'dotnet':20B 'drive':55B 'exist':83C 'field':63B 'filter':7A,41B,58B,93C 'gantt':38B,89C 'grid':12A,35B,86C 'hide':68B 'ignor':46B 'improp':79C 'input':80C 'meant':66B 'model':44B,96C 'packag':21B 'properti':45B,97C 'queri':61B 'telerik':1A,23B,26B,70C 'telerik-ui':22B 'treelist':36B,87C 'ui':2A,24B,27B,71C 'v12.0.0':75C 'valid':81C 'version':30B,74C 'vulner':82C","nicknames":[],"mitigations":[],"who_affected":"Applications built with Telerik UI for Blazor versions 12.0.0 through 15.2.0 that use the Grid, TreeList or Gantt AI command filters. The sources do not say whether the AI filter feature is on by default, so teams should confirm whether they enabled it. Teams not using these components or the AI filters can skip it.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"developers","plain_action":null,"pkeys":[],"ptokens":[],"labels":["blazor","dotnet","medium","package","telerikui"],"campaign_type":null,"search_a":"'-119102':15A,18A '-2026':14A,17A 'ai':5A 'allowlist':10A 'blazor':4A 'bypass':8A 'column':9A 'command':6A 'cve':13A,16A 'filter':7A 'grid':12A 'telerik':1A 'ui':2A","search_b":"'12.0.0':31B '15.2.0':33B 'accept':42B 'ai':39B,57B 'allowlist':50B 'attack':52B 'blazor':19B,29B 'column':49B 'command':40B,59B 'data':62B 'declar':48B 'develop':65B 'dotnet':20B 'drive':55B 'field':63B 'filter':41B,58B 'gantt':38B 'grid':35B 'hide':68B 'ignor':46B 'meant':66B 'model':44B 'packag':21B 'properti':45B 'queri':61B 'telerik':23B,26B 'telerik-ui':22B 'treelist':36B 'ui':24B,27B 'version':30B","search_c":"'15.2.0':77C 'ai':91C 'allowlist':102C 'blazor':73C 'bypass':98C 'column':101C 'command':92C 'declar':100C 'exist':83C 'filter':93C 'gantt':89C 'grid':86C 'improp':79C 'input':80C 'model':96C 'properti':97C 'telerik':70C 'treelist':87C 'ui':71C 'v12.0.0':75C 'valid':81C 'version':74C 'vulner':82C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-13T15:17:32+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss_by":"security@progress.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-119102","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-119102","severity":null,"published_at":"2026-11-13T15:17:32+00:00","modified_at":"2026-11-13T15:17:32+00:00","first_seen_at":"2026-11-13T15:46:15+00:00","fetched_at":"2026-11-13T15:46:15+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}