EUVD-2026-125354

In Progress® Telerik® UI for Blazor versions v11.1.0 through v14.0.0, the demo application's Chat AI Integration example contains a relative path traversal vulnerability that could allow an attacker to read files outside of the chat attachments folder that are within the server's filesystem scope...

CVE-2026-118976

Progress Telerik UI for Blazor versions v11.1.0 through v14.0.0 are affected by a relative path traversal vulnerability (CWE-23). The flaw exists within the demo application's Chat AI Integration example , potentially allowing an attacker to read files outside of the chat attachments folder that ...

PT-2026-146868

In Progress® Telerik® UI for Blazor versions v11.1.0 through v14.0.0, the demo application's Chat AI Integration example contains a relative path traversal vulnerability that could allow an attacker to read files outside of the chat attachments folder that are within the server's filesystem scope...