Threats affecting pkg:nuget/telerik.documentprocessing

A path traversal vulnerability exists in In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027. This flaw affects the Convert and Merge AI agent tools, allowing an authenticated low-privilege attacker who can supply tool arguments to read files outside the intended output directory and overwrite writable files via relative file paths resolved against the process's current working directory.

A vulnerability in In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027 allows an unauthenticated attacker to bypass digital signature validation. The flaw involves improper verification of cryptographic signatures and certificate validation in RadPdfProcessing, enabling forged PDF content to be reported as unmodified with a valid signing certificate.

CVE-2026-118036 affects Progress Software's Telerik Document Processing Libraries prior to version 2026.3.1027. The vulnerability involves uncontrolled recursion, infinite loops, inefficient algorithmic complexity, and resource allocation issues in RadPdfProcessing and AI document summarization and question answering features. An unauthenticated attacker can exploit this by submitting crafted PDF documents or document text, causing the host process to hang or terminate. The issue is fixed in version 2026.3.1027.

CVE-2026-118035 affects Progress Software's Telerik Document Processing Libraries prior to version 2026.3.1027. The vulnerability involves uncontrolled recursion, inefficient algorithmic complexity, and infinite loop issues in the RadWordsProcessing component. An unauthenticated attacker can exploit this by crafting malicious DOCX, DOC, RTF, or HTML documents to cause the host process to hang or terminate unexpectedly.

CVE-2026-118039 is an XML External Entity (XXE) vulnerability in Progress Software's Telerik Document Processing Libraries before version 2026.3.1027. The flaw exists in SVG image processing, where an unauthenticated attacker can exploit a crafted SVG image containing a nested embedded SVG to read local files on the server during image processing or PDF export. This vulnerability has a high severity score of 7.5 and allows unauthorized disclosure of sensitive information without requiring user interaction or privileges.