{"data":{"id":"d0bccd57-6b94-42c5-8173-cbe2feeb504e","title":"CVE-2026-118038: In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, a path traversal vulnerability in the…","summary":"Telerik Document Processing Libraries before version 2026.3.1027 contain a path traversal flaw (CVE-2026-118038) in the Convert and Merge AI agent tools. An authenticated attacker with low privileges who can supply tool arguments can read files outside the configured output directory and overwrite them where writable, using relative paths resolved against the process current working directory.","solution":"Fixed in version 2026.3.1027 or later.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-118038","publishedAt":"2026-10-28T13:17:06.627Z","cveId":"CVE-2026-118038","cweIds":["CWE-22"],"cvssScore":"7.1","cvssSeverity":"high","severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["Telerik Document Processing Libraries","Convert and Merge AI agent tools"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Progress Telerik Document Processing Libraries path traversal flaw","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N","attackVector":"network","attackComplexity":"low","privilegesRequired":"low","userInteraction":"none","exploitMaturity":"unknown","epssScore":0,"epssCheckedAt":"2026-10-28T18:09:26.141Z","kevDateAdded":null,"advisoryAliases":["GHSA-wvgf-7r22-7x6m"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-10-28T18:09:29.244Z","patchAvailable":null,"disclosureDate":"2026-10-28T13:17:06.627Z","capecIds":["CAPEC-126"],"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality","integrity"],"aiComponentTargeted":"agent","llmSpecific":false,"classifierConfidence":0.8,"researchCategory":null,"atlasIds":null}}