Path Traversal in Telerik Document Processing Libraries AI Agent Tools

Özet

Türkçe özeti henüz hazır değil; şimdilik kaynağın kendi açıklamasını gösteriyoruz.

In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, a path traversal vulnerability in the Convert and Merge AI agent tools allows an authenticated attacker with low privileges who can supply tool arguments to read files outside the configured output directory, and to overwrite such files where they are writable, via relative file paths that resolve against the process current working directory.

Etkilenen sürümler1 yazılım

Kaynaklar3 kaynak

• CVE.org kaydı
• NVD kaydı
• docs.telerik.com/…ase/kb-security-path-traversal-cve-2026-118038 Üretici bülteni

Kayıt geçmişi

1. 28 Eki 2026 15:27Yayımlandı

İlgili açıklar

• 7,5 CVE-2026-118037Uncontrolled Resource Consumption in Telerik Document Processing Libraries RadSpreadProcessing and RadSpreadStreamProcessing
• 7,5 CVE-2026-118036Uncontrolled Resource Consumption in Telerik Document Processing Libraries RadPdfProcessing and AI Document Summarization and Question Answering
• 7,5 CVE-2026-118035Uncontrolled Resource Consumption in Telerik Document Processing Libraries RadWordsProcessing
• 7,5 CVE-2026-118040Improper Signature and Certificate Validation in Telerik Document Processing Libraries RadPdfProcessing
• 7,5 CVE-2026-118039XML External Entity Reference in Telerik Document Processing Libraries SVG Image Processing
• 9,4 CVE-2026-105420Path Traversal in Wing WFTP Server leading to Remote Code Execution