Kendo UI CVE-2026-108116

Exploitation requires the target application to use the Kendo UI for jQuery PivotGrid component configured with the XMLA transport pointing at a backend XMLA/OLAP data source (e.g., Microsoft SQL Server Analysis Services); the attacker supplies crafted filter values that are passed into MDX predicates or SOAP XML. Applications that do not use the PivotGrid, or that use PivotGrid with a non-XMLA (local/flat) data source, are not affected. Limiting factors: the PivotGrid filter surface must be reachable by the attacker (its exposure to unauthenticated users depends on the host application's own access controls), and the affected version must be prior to v2026.3.1015. No user interaction by a victim is required (UI:N).

The vendor CVSS vector (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N, 7.5 HIGH) signals a network-reachable, low-complexity, unauthenticated injection whose impact is confidentiality-only (C:H, I:N, A:N) - consistent with the CWE-74 injection class and the description's emphasis on data exposure via the configured XMLA connection rather than code execution or tampering. However, the raw CVSS understates a critical gating factor: exploitation is not possible against a default Kendo UI deployment - it requires an application that specifically uses the PivotGrid component wired to an XMLA (SSAS/OLAP) transport, so the real-world exploitable population is a subset of all Kendo UI installs. No EPSS score, CISA KEV listing, POC, or SSVC decision data was provided, so exploitation probability and automatability cannot be quantified from the input. There is no conflict between the signals, but there is a MISSING-data gap: the PR:N 'unauthenticated' rating is believable for a public-facing PivotGrid filter, yet whether a given deployment exposes the PivotGrid to unauthenticated users depends on the host application's access controls - verify per deployment. Net: a credible, vendor-confirmed data-disclosure flaw worth patching promptly for anyone using PivotGrid+XMLA, but likely narrower in real-world reach than the 7.5 score alone implies.

An attacker interacting with a web application that embeds a Kendo UI PivotGrid backed by an XMLA/SSAS data source submits specially crafted filter values that break out of the intended MDX predicate or inject XML markup into the SOAP request sent to the XMLA endpoint. The manipulated query returns cube data the user was never authorized to see, exposing information reachable through the configured XMLA connection. No public exploit code was identified at time of analysis, and the low attack complexity (AC:L) means manipulation requires only crafted filter input, not special timing or conditions.