---
id: CVE-2026-118036
title: >-
  Uncontrolled Resource Consumption in Telerik Document Processing Libraries
  RadPdfProcessing and AI Document Summarization and Question Answering
summary: >-
  In Progress® Telerik® Document Processing Libraries prior to version
  2026.3.1027, uncontrolled recursion, infinite loop, inefficient algorithmic
  complexity and resource allocation vulnerabilities in RadPdfProcessing and AI
  document summa…
severity: high
cvss: 7.5
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
cvssSource: cna
cwe:
  - CWE-674
  - CWE-835
  - CWE-407
  - CWE-770
  - CWE-789
vendor: Progress Software
product: Telerik Document Processing Libraries
affected:
  - telerik_document_processing_libraries < 2026.3.1027
published: '2026-10-28'
updated: '2026-10-28'
sourceUpdated: '2026-10-28T12:33:04.373Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-118036'
references:
  - url: >-
      https://docs.telerik.com/devtools/document-processing/knowledge-base/kb-security-uncontrolled-resource-consumption-pdfprocessing-cve-2026-118036
tags:
  - cve.org
ingestedAt: '2026-10-28T13:11:23.680Z'
---

## Overview

In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, uncontrolled recursion, infinite loop, inefficient algorithmic complexity and resource allocation vulnerabilities in RadPdfProcessing and AI document summarization and question answering allow an unauthenticated attacker to terminate or hang the host process via a crafted PDF document or document text submitted for summarization or question answering.

## Affected

- `telerik_document_processing_libraries < 2026.3.1027`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.