Skip to content
OpenAdvisories

Product · Microsoft

kiota

13 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.1
    CVE-2026-73851

    Kiota: Path traversal in generated plugin manifest static_template.file reference (percent-encoding bypass)

    Kiota is an OpenAPI based HTTP Client code generator. Prior to 1.29.1 and 1.34.0, an attacker who controls or tampers with the OpenAPI description consumed by Kiota can supply a file reference that resolves outside the manifest package (e.g. ../../../../etc/p…

    Microsoft kiota Microsoft.OpenApi.Kiota NuGet