CVE-2026-124705: URL Redirection to Untrusted Site in Progress Telerik UI for .NET MAUI
In Progress® Telerik® UI for .NET MAUI prior to version 16.0.0, an untrusted URL redirection vulnerability in the RadRichTextEditor hyperlink handling and the RadPdfViewer link annotation handling allows an unauthenticated attacker to launch arbitrary operating system protocol handlers with attacker-controlled arguments via a crafted document or PDF link with a non-allowlisted URI scheme that the user opens.
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Progress Telerik UI for .NET MAUIto a version that resolves this vulnerability.Fixed in 16.0.0
Event History
Frequently Asked Questions
Which applications are exposed?
Applications using Progress Telerik UI for .NET MAUI versions earlier than 16.0.0 are affected when they use RadRichTextEditor hyperlink handling or RadPdfViewer link annotation handling to open documents or PDFs.
What must an attacker do to exploit this issue?
An attacker must provide a crafted document or PDF containing a link that uses a URI scheme not on the allowlist. Exploitation requires the user to open that link.
What is the potential impact after a user opens a malicious link?
The crafted link can launch arbitrary operating system protocol handlers with attacker-controlled arguments. The vulnerability is exploitable without attacker authentication, but requires user interaction and local access according to the supplied CVSS vector.