Progress Telerik UI for AJAX Uncontrolled Resource Consumption Vulnerability in RadAsyncUpload

A vulnerability allowing uncontrolled resource consumption has been identified in Progress Telerik UI for AJAX versions prior to 2026.1.421. The issue resides in the RadAsyncUpload component, where file uploads can surpass the set maximum size limit. This occurs due to a lack of cumulative size enforcement during the reassembly of upload chunks, ultimately leading to disk space exhaustion.

Impact

Exploitation of this vulnerability can cause disk space exhaustion, potentially leading to a denial of service condition on the affected system.