PT-2026-146868

CVE-2026-118976

·

Published

2026-11-13

·

Updated

2026-11-13

Description by

CVSS 3.1
7.5
High
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
In Progress® Telerik® UI for Blazor versions v11.1.0 through v14.0.0, the demo application's Chat AI Integration example contains a relative path traversal vulnerability that could allow an attacker to read files outside of the chat attachments folder that are within the server's filesystem scope.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-23: Relative Path Traversal
Related identifiers
CVE-2026-118976
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com