Path Traversal in Telerik Document Processing Libraries AI Agent Tools (CVE-2026-118038)

Updated on Oct 27, 2026

Description

October 2026 - CVE-2026-118038

• Progress® Telerik® Document Processing Libraries AI agent tools (Telerik.Documents.AI.AgentTools.Conversion), versions >= 2026.1.210 and < 2026.3.1027.

What Are the Impacts

In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, a path traversal vulnerability in the Convert and Merge AI agent tools allows an authenticated attacker with low privileges who can supply tool arguments to read files outside the configured output directory, and to overwrite such files where they are writable, via relative file paths that resolve against the process current working directory.

Issue

• CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
• CAPEC-126: Path Traversal

Solution

The issue is fixed in version 2026.3.1027. The Progress Telerik team strongly recommends upgrading to this version or later.

Current Version	Update to
>= 2026.1.210 and < 2026.3.1027	>= 2026.3.1027

All customers who have a license for Progress® Telerik® Document Processing Libraries can access their downloads here: Product Downloads | Your Account.

Notes

• If you have any questions or concerns related to this issue, open a new Technical Support case in Your Account | Support Center. Technical Support is available to customers with an active support plan.

External References

CVE-2026-118038 (High)

CVSS: 7.1

Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, a path traversal vulnerability in the Convert and Merge AI agent tools allows an authenticated attacker with low privileges who can supply tool arguments to read files outside the configured output directory, and to overwrite such files where they are writable, via relative file paths that resolve against the process current working directory.