Vulnerability · Published Jul 16, 2026 · Assigned by GitHub_M
CVE-2026-59864Kiota: Path/URL injection into generated Copilot plugin manifest via x-ai-* extensions
Critical 9.3
In plain English
A critical-severity path traversal in kiota from microsoft. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.3% (higher than 71% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Official description
Kiota is an OpenAPI based HTTP Client code generator. Prior to 1.29.1 and 1.32.5, `kiota plugin add` and `kiota plugin generate` (with `-t APIPlugin`) emitted attacker-controlled static_template.file values from x-ai-adaptive-card and x-ai-capabilities into generated Microsoft 365 Copilot and Teams plugin manifests without path validation, allowing ../, absolute, rooted, UNC, Windows drive, or URI paths in response_semantics.static_template.file to cause path traversal or out-of-package file inclusion when the generated plugin was deployed. This issue is fixed in version 1.29.1 and 1.32.5.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| NuGet | microsoft.openapi.kiota | 1.32.5 | GHSA-4jwf-m4wg-8p66 |
| NuGet | microsoft.openapi.kiota | 1.29.1 | GHSA-4jwf-m4wg-8p66 |
| NuGet | microsoft.openapi.kiota.builder | 1.32.5 | GHSA-4jwf-m4wg-8p66 |
| NuGet | microsoft.openapi.kiota.builder | 1.29.1 | GHSA-4jwf-m4wg-8p66 |
Affected products (as reported)
Weakness: CWE-22, CWE-829 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
References
- https://github.com/microsoft/kiota/security/advisories/GHSA-4jwf-m4wg-8p66 x_refsource_CONFIRM
- https://github.com/microsoft/kiota/pull/7892 x_refsource_MISC
- https://github.com/microsoft/kiota/commit/9a185994a4e549b7bba3cc2beffb9736aa902e79 x_refsource_MISC
- https://github.com/microsoft/kiota/releases/tag/v1.32.5 x_refsource_MISC