CVE-2026-118976

The Telerik AI chat demo could read files outside its attachment folder

Progress · Telerik UI for Blazor Chat AI Integration demo

First documented disclosure · Review checkpoint

Summary

The sample used a file path without confining reads to the chat attachment directory. Files readable by the demo process could be exposed. Progress limits the finding to file reads.

Severity and exploitation evidence

High · 7.5/10 · CVSS 3.1. Severity source.

Exploitation not established: The reviewed advisory does not report malicious exploitation.

Exploitation evidence source

Technical severity is not a measure of observed attacks or of risk to your deployment. Attempts, demonstrations, and successful compromise retain the qualifications in the source.

How the weakness works

The sample used a file path without confining reads to the chat attachment directory.

Conditions required

An application deployed the affected demo or copied its attachment handling.

Potential impact

Files readable by the demo process could be exposed. Progress limits the finding to file reads.

Affected versions and configurations

Demo source from 11.1.0 through 14.0.0.

Fix and mitigation status

Corrected demo source ships in the 14.1.0 or later ZIP archive.

Practical next steps

Replace the sample or copied code from the corrected archive and redeploy. A NuGet update alone leaves copied code in place.

Operating lesson

Track copied reference code as a deployed dependency.

Evidence and limits

The advisory and CVE record were published on 2026-11-13.

Sources