A path traversal vulnerability exists in In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027. This flaw affects the Convert and Merge AI agent tools, allowing an authenticated low-privilege attacker who can supply tool arguments to read files outside the intended output directory and overwrite writable files via relative file paths resolved against the process's current working directory.