HighVulnerability
CVE-2026-59864: Kiota plugin generation path traversal through static_template file values
- Source
- NVD(opens in a new tab)
- Identifier
- CVE-2026-59864
- Published
- Record updated
- Affected
- Microsoft.OpenApi.Kiota >= 1.30.0, < 1.32.5, fixed in 1.32.5
- Microsoft.OpenApi.Kiota.Builder >= 1.30.0, < 1.32.5, fixed in 1.32.5
- Microsoft.OpenApi.Kiota < 1.29.1, fixed in 1.29.1
- and 1 more
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
- EPSS
- 1.3%
Summary
Kiota versions prior to 1.32.5 generate Microsoft 365 Copilot and Teams plugin manifests with `static_template.file` values taken from `x-ai-adaptive-card` and `x-ai-capabilities` without path validation, via `kiota plugin add` and `kiota plugin generate` (with `-t APIPlugin`). Attacker-controlled values such as `../`, absolute, UNC, or Windows drive paths can cause path traversal or out-of-package file inclusion when the generated plugin is deployed.
Mitigation
Fixed in 1.32.5.
Related items
- HighCVE-2026-108456 Azure AI Foundry Elevation of Privilege VulnerabilitySame vendor · MSRC Security Update Guide
- HighGHSA-h4xc-3qfq-jf93: Pydantic AI Web chat UI (`Agent.to_web()`, `clai web`): a website visited by the developer can trigger agent runs and server-side tool execution on the local chat endpointSame vendor · GitHub Advisory Database
- LowGHSA-6gw6-rv2g-25mg: Kiota: Unsafe oauth_card_path references in Kiota-generated API plugin manifestsSame vendor · GitHub Advisory Database
- MediumCVE-2026-89278: GPTranslate WordPress plugin exposes plaintext API key to unauthenticated usersSame vendor · NVD/CVE Database
- HighCVE-2026-85887: M365 Copilot incorrect permission assignment allows information disclosureSame vendor · NVD/CVE Database