Telerik Document Processing CVE-2026-118038

Exploitation requires that the host application exposes the Telerik Document Processing Libraries' Convert and Merge AI agent tools and that the attacker is an authenticated, low-privilege user able to supply arguments to those tools (consistent with PR:L). The concrete prerequisite named in the description is the ability to pass relative file paths that resolve against the process's current working directory, letting the attacker escape the configured output directory. Limiting factors: authentication is required (not remote-unauthenticated); the specific AI agent tool feature must be in use and reachable by the attacker; write/overwrite impact is constrained to files that are writable by the process account; and the vulnerability is remediated only by updating to version 2026.3.1027 or later per the vendor advisory.

This is a medium-to-high-priority issue that falls short of an emergency. The provided CVSS 3.1 vector (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N, base 7.1) indicates a network-reachable, low-complexity flaw requiring low-privilege authentication (PR:L) and no user interaction, with high confidentiality impact (arbitrary file read) and only low integrity impact (conditional overwrite where files are writable). The vuln.today decision label is 'this_week', which aligns with a serious-but-not-critical severity rather than act_now/emergency. No EPSS score, no KEV listing, and no PoC or exploit reference were supplied - the sole reference is the Progress/Telerik vendor advisory (knowledge-base article), so exploitation probability and in-the-wild activity cannot be quantified from the input. The key limiting factor not fully reflected by the raw CVSS score is that exploitation depends on the Convert and Merge AI agent tools being exposed to the attacker and the attacker being able to supply tool arguments; this is a comparatively new and narrow feature surface, which tempers real-world exposure despite the network attack vector. Net assessment: treat as a genuine priority to patch on a normal urgency timeline, but it is not a mass-exploitation candidate on the available signals.

A low-privileged authenticated user of an application that exposes the Telerik Document Processing Libraries' Convert or Merge AI agent tools supplies a tool argument containing a relative file path (e.g. traversal sequences) that resolves against the process's current working directory. The library reads a sensitive file outside the configured output directory and returns its contents, or overwrites a writable file outside that directory. No public exploit code or PoC reference was identified at time of analysis.