CVE-2026-73851
MEDIUM
6,1
Source: [email protected]
Attack Vector: network
Attack Complexity: low
Privileges Required: none
User Interaction: active
Confidentiality: N/A
Integrity: N/A
Availability: N/A
Description
AI Translation Available
Kiota is an OpenAPI based HTTP Client code generator. Prior to 1.29.1 and 1.34.0, an attacker who controls or tampers with the OpenAPI description consumed by Kiota can supply a file reference that resolves outside the manifest package (e.g. ../../../../etc/passwd, an absolute path, or a file:// / http(s):// URI). When the generated manifest is deployed and consumed by an AI host, this can lead to inclusion or disclosure of files outside the intended package boundary. This vulnerability is fixed in 1.29.1 and 1.34.0.
22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
StableCommon Consequences
Security Scopes Affected:
Integrity
Confidentiality
Availability
Potential Impacts:
Execute Unauthorized Code Or Commands
Modify Files Or Directories
Read Files Or Directories
Dos: Crash, Exit, Or Restart
Applicable Platforms
Technologies:
AI/ML
829
Inclusion of Functionality from Untrusted Control Sphere
IncompleteCommon Consequences
Security Scopes Affected:
Confidentiality
Integrity
Availability
Potential Impacts:
Execute Unauthorized Code Or Commands
Applicable Platforms
All platforms may be affected
https://github.com/microsoft/kiota/commit/430008e9d700b3fe80f206c672415cfbd8e83…
https://github.com/microsoft/kiota/commit/de3d18d9fe31ced4ac749728d3a2f94811f59…
https://github.com/microsoft/kiota/issues/7912
https://github.com/microsoft/kiota/pull/7910
https://github.com/microsoft/kiota/pull/7913
https://github.com/microsoft/kiota/releases/tag/v1.29.1
https://github.com/microsoft/kiota/releases/tag/v1.34.0
https://github.com/microsoft/kiota/security/advisories/GHSA-p5rm-jg5c-8c77