Resource Consumption Vulnerabilities in Telerik Document Processing Libraries

CVE-2026-118036

What is CVE-2026-118036?

The Telerik Document Processing Libraries exhibit vulnerabilities that allow an unauthenticated attacker to create conditions leading to uncontrolled recursion, infinite loops, and inefficient resource allocation. These issues arise when processing crafted PDF documents or when utilizing AI-powered document summarization and question-answering features. An attacker can exploit these vulnerabilities to jeopardize the stability of the host process, potentially resulting in termination or hanging of the application. Users are advised to upgrade to version 2026.3.1027 or later to mitigate these vulnerabilities.

References