EUVD-2026-93424
GHSA-6gw6-rv2g-25mg
Severity by source
AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N
Malicious spec is network-delivered (AV:N) but needs a developer to run generation (UI:R) and depends on downstream resolution (AC:H); unauthenticated (PR:N) with integrity-only impact (I:L), no C/A.
Primary rating from Vendor (GitHub_M).
CVSS VectorVendor: GitHub_M
Lifecycle Timeline
3DescriptionCVE.org
Kiota is an OpenAPI based HTTP Client code generator. From 1.25.1 until 1.35.0, Kiota copies x-ai-capabilities.response_semantics.oauth_card_path from an attacker-controlled or compromised OpenAPI description into a generated API plugin manifest without validating that the value is a safe package-relative file reference. Parent-directory traversal, rooted paths, or absolute URIs can therefore reach a consuming host that resolves the reference, allowing the host to cross the intended plugin-package boundary or use an unintended authentication card. Kiota does not itself read a local file or execute code merely while generating the manifest, and impact requires downstream resolution of the unsafe reference. This issue is fixed in version 1.35.0.
AnalysisAI
Microsoft Kiota, the OpenAPI-based HTTP client code generator, fails to validate the x-ai-capabilities.response_semantics.oauth_card_path value before copying it into a generated API plugin manifest, allowing path-traversal or absolute-URI references to survive into the manifest in versions 1.25.1 through 1.34.x. An attacker who controls or compromises the OpenAPI description can inject a malicious oauth_card_path (for example '../../../../etc/passwd', 'C:\\Windows\\...', a UNC path, or 'file:///etc/passwd') so that a downstream host resolving the plugin manifest crosses the intended plugin-package boundary or loads an unintended authentication card. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
No credit card · 7-day full trial
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires all of the following: (1) an OpenAPI description under attacker control or compromised that includes an x-ai-capabilities.response_semantics.oauth_card_path value set to an unsafe reference (a '..' parent-directory traversal, a rooted/absolute path like /etc/passwd or C:\..., a UNC path, or an absolute URI such as http:// or file://); (2) a developer running Kiota (versions 1.25.1 through 1.34.x) to generate an API plugin manifest (PluginType APIPlugin) from that description; and (3) a downstream consuming host that subsequently resolves the oauth_card_path reference. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | This is a genuinely low-priority issue, not a high-CVSS flaw inflated by the network attack vector. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Upgrade Microsoft Kiota to version 1.35.0, which is the vendor-released patch that strips unsafe oauth_card_path file references during manifest generation (see the release at https://github.com/microsoft/kiota/releases/tag/v1.35.0 and the advisory at https://github.com/microsoft/kiota/security/advisories/GHSA-6gw6-rv2g-25mg; the code fix is in PR https://github.com/microsoft/kiota/pull/8055 and commit https://github.com/microsoft/kiota/commit/fc0f219b8a665c4c69be8befcff035ba0eb8e4ce). … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Command injection in Microsoft Kiota before 1.32.5 lets a malicious or compromised OpenAPI description dictate the insta
Path traversal and code injection in Microsoft Kiota before 1.32.5 lets an attacker-controlled OpenAPI description write
Path traversal in Microsoft Kiota before 1.32.5 lets an attacker-controlled OpenAPI description inject unvalidated `stat
Code injection in Microsoft Kiota 0.5.0 through pre-1.35.0 allows attacker-controlled text embedded in an OpenAPI descri
PHP code generation in Microsoft Kiota prior to 1.32.4 permits injection of arbitrary PHP code when the generator proces
Code-generation injection in Microsoft Kiota's C# XML documentation-comment writer allows an attacker who controls or co
Code injection in Microsoft Kiota Ruby code generator allows remote code execution through crafted OpenAPI specification
Code injection in Microsoft Kiota's Python client generator (versions prior to 1.32.0) allows an attacker who controls a
Build-time SSRF, remote file inclusion, and local file inclusion in Microsoft Kiota before 1.32.5 lets an attacker-contr
Code injection in Microsoft Kiota versions prior to 1.31.1 allows attackers who control or tamper with OpenAPI descripti
Arbitrary file write via path traversal in Microsoft Kiota (OpenAPI HTTP client/plugin code generator) before 1.32.5 all
Same weakness CWE-22 – Path Traversal
View allSame technique Path Traversal
View allShare
External POC / Exploit Code
Leaving vuln.today