Vulnerabilities

In Progress® Telerik® UI for Blazor versions v11.1.0 through v14.0.0, the demo application's Chat AI Integration example contains a relative path…

In Progress® Telerik® UI for Blazor versions v11.1.0 through v14.0.0, the demo application's Chat AI Integration example contains a relative path traversal vulnerability that could allow an attacker to read files outside of the chat attachments folder that are within the server's filesystem scope.

Read at NIST National Vulnerability Database (CVE API 2.0)

Vendor

Progress Software

Product

Telerik UI for Blazor

CVSS v3.1

7.5 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness

CWE-23

Exposure class

File transfer

NVD status

Received

• NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
• CVE-2026-118976 on this site · NVD · CVE.org · Vulnpedia