CVE-2026-119102

Telerik AI filters could query undeclared model properties

Progress · Telerik UI for Blazor Grid, TreeList and Gantt AI commands

First documented disclosure · Review checkpoint

Summary

AI filter commands accepted properties outside the columns declared by the application. Users could filter on model properties that the application intended to exclude.

Severity and exploitation evidence

Medium · 6.5/10 · CVSS 3.1. Severity source.

Exploitation not established: The reviewed advisory does not report malicious exploitation.

Exploitation evidence source

Technical severity is not a measure of observed attacks or of risk to your deployment. Attempts, demonstrations, and successful compromise retain the qualifications in the source.

How the weakness works

AI filter commands accepted properties outside the columns declared by the application.

Conditions required

An application used the AI command feature on the affected components.

Potential impact

Users could filter on model properties that the application intended to exclude.

Affected versions and configurations

12.0.0 through 15.2.0.

Fix and mitigation status

16.0.0.

Practical next steps

Upgrade Telerik UI for Blazor to 16.0.0 or later.

Operating lesson

Authorize every model property used by a generated filter.

Evidence and limits

The advisory and CVE record were published on 2026-11-13.

Sources