Microsoft Kiota vulnerabilities

• microsoft kiota, microsoft.openapi.kiota, microsoft.openapi.kiota.builder +2 more Kiota: Code injection through doc-comment delimiter reformation in Kiota Java and PHP generators CVE-2026-105796 Fix available 8.8 HighOctober 6, 2026
• microsoft kiota, microsoft.openapi.kiota, microsoft.openapi.kiota.builder +2 more Kiota: Unsafe oauth_card_path references in Kiota-generated API plugin manifests CVE-2026-105795 Fix available 3.1 LowOctober 6, 2026
• microsoft kiota Kiota: Path traversal in generated plugin manifest static_template.file reference (percent-encoding bypass) CVE-2026-73851 Fix available 6.1 MediumJuly 24, 2026
• microsoft kiota Kiota: Generation-time SSRF + remote/local file inclusion via unrestricted $ref CVE-2026-59867 Fix available 7.1 HighJuly 16, 2026
• microsoft kiota Kiota: Arbitrary file write + code-injection via x-ms-kiota-info clientClassName and clientNamespaceName CVE-2026-59866 Fix available 9.3 CriticalJuly 16, 2026
• microsoft kiota Kiota: Path/URL injection into generated Copilot plugin manifest via x-ai-* extensions CVE-2026-59864 Fix available 9.3 CriticalJuly 16, 2026
• microsoft kiota Kiota: Command injection via x-ms-kiota-info dependencyInstallCommand surfaced by `kiota info` CVE-2026-59865 Fix available 9.3 CriticalJuly 16, 2026
• microsoft kiota Kiota: Workspace-config poisoning: out-of-repo file write + generation-time SSRF CVE-2026-59863 Fix available 7.0 HighJuly 16, 2026
• microsoft kiota Kiota: Code Generation Literal Injection in the PHP Generator CVE-2026-59859 Fix available 8.7 HighJuly 16, 2026
• microsoft kiota Kiota: Code Generation Literal Injection in the Python Generator CVE-2026-59862 Fix available 7.5 HighJuly 16, 2026
• microsoft kiota Kiota: Code Generation Literal Injection in Kiota Ruby Generator CVE-2026-59861 Fix available 7.5 HighJuly 16, 2026
• microsoft kiota Kiota: XML Doc-Comment Newline Breakout Code Injection CVE-2026-59860 Fix available 8.7 HighJuly 16, 2026
• microsoft kiota-typescript @microsoft/kiota-http-fetchlibrary: Bearer token and Cookie leak across origin on redirect due to case-mismatched scrub in fetchRequestAdapter CVE-2026-49336 Fix available 5.5 MediumJune 19, 2026
• microsoft kiota-java, microsoft-kiota-http, github.com/microsoft/kiota-http-go +3 more +5 more Kiota abstractions RedirectHandler leaks Cookie/Proxy-Authorization headers on cross-host redirect CVE-2026-44503 Fix available 7.0 HighMay 7, 2026
• microsoft kiota Kiota: Code Generation Literal Injection CVE-2026-41134 Fix available 7.3 HighApril 14, 2026