---
id: "CVE-2026-124705"
page: "https://infrastack.ai/live/CVE-2026-124705"
kind: "vulnerability"
aliases: ["CVE-2026-124705"]
title: "Telerik UI for .NET MAUI: crafted links launch OS protocol handlers"
severity: "high"
cvss: 7.8
epss: null
exploited: false
status: "open"
category: "package"
products: []
ecosystems: []
tags: ["android", "dotnet", "ios", "maui", "package", "telerik", "windows"]
not_affected_if: ["no-telerik-maui", "no-user-documents"]
published_at: "2026-11-12T12:18:22+00:00"
first_seen_at: "2026-11-12T12:38:18+00:00"
updated_at: "2026-11-12T12:40:33+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-124705", "first_seen_at": "2026-11-12T12:38:18+00:00"}]
exploit_sources: []
---

# Telerik UI for .NET MAUI: crafted links launch OS protocol handlers

Link for people: https://infrastack.ai/live/CVE-2026-124705 (this .md is for agents)

Telerik UI for .NET MAUI before 16.0.0 does not restrict URI schemes in RadRichTextEditor hyperlinks and RadPdfViewer link annotations. A user who opens a crafted document or PDF link can make the operating system launch an arbitrary protocol handler with attacker-controlled arguments.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Look for the Telerik UI for .NET MAUI package in the project file (`Telerik.UI.for.Maui` in the `.csproj` or `packages.lock.json`) and read its version.
- Check whether the app uses RadRichTextEditor or RadPdfViewer to open user-supplied documents or PDFs.

## Fix

- Telerik UI for .NET MAUI: move to `16.0.0` or later.

## Timeline

- 2026-11-12T12:38:18+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-124705

## From the sources

In Progress® Telerik® UI for .NET MAUI prior to version 16.0.0, an untrusted URL redirection vulnerability in the RadRichTextEditor hyperlink handling and the RadPdfViewer link annotation handling allows an unauthenticated attacker to launch arbitrary operating system protocol handlers with attacker-controlled arguments via a crafted document or PDF link with a non-allowlisted URI scheme that the user opens.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_