CVE-2026-118038

Telerik Convert and Merge AI tools can escape the configured file directory

Progress Software · Telerik.Documents.AI.AgentTools.Conversion

First documented disclosure · Review checkpoint

Summary

Low-privilege tool callers can read or overwrite files outside the configured output directory.

Severity and exploitation evidence

High · 7.1/10 · CVSS 3.1. Severity source.

Exploitation not established: The reviewed primary sources do not establish malicious exploitation or a confirmed victim incident.

Exploitation evidence source

Technical severity is not a measure of observed attacks or of risk to your deployment. Attempts, demonstrations, and successful compromise retain the qualifications in the source.

How the weakness works

Relative paths resolve against the host working directory without the intended directory boundary.

Conditions required

Authenticated low-privilege access to tool arguments; file reads and writes remain subject to host process permissions.

Potential impact

Read access outside the output directory, plus overwrites where files are writable.

Affected versions and configurations

2026.1.210 through versions before 2026.3.1027.

Fix and mitigation status

2026.3.1027.

Practical next steps

Upgrade and restrict tool arguments and process filesystem permissions.

Operating lesson

A declared output directory must be enforced after path normalization.

Evidence and limits

The original vendor advisory is dated October 27; CNA publication followed October 28. Do not generalize the affected range to releases before 2026.1.210 or claim unrestricted file writes.

Sources