CVE-2026-59864: Kiota is an OpenAPI based HTTP Client code generator. Prior to 1.32.5, `kiota plugin add` and `kiota plugin generate` (w

Kiota, a tool that generates HTTP client code from API descriptions, had a security flaw in versions before 1.32.5 where it didn't properly validate file paths when creating plugin files. This allowed attackers to include specially crafted file paths that could access files outside the intended directory (path traversal, where attackers use ../ to escape folders) or include files from unexpected locations when the generated plugin was deployed.