CVE-2026-105795— Kiota: Unsafe oauth_card_path references in Kiota-generated API plugin manifests
Quick assessment
Affected
microsoft kiota
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Kiota 是一个基于 OpenAPI 的 HTTP 客户端代码生成工具。在版本 1.25.1 至 1.35.0 之间，Kiota 会将攻击者可控或已被篡改的 OpenAPI 描述文件中的 字段直接复制到生成的 API 插件清单中，且未对该值是否为安全的包相对文件引用进行验证。因此，攻击者可通过使用父目录遍历路径（parent-directory traversal）、根路径（rooted paths）或绝对 URI（absolute URIs），诱使最终使用该插件的主机在解析引用时越出预期的插件包边界，或利用非预
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-105795
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Kiota: Unsafe oauth_card_path references in Kiota-generated API plugin manifests
Source: CVE Program / CVE List V5
Vulnerability Description
Kiota is an OpenAPI based HTTP Client code generator. From 1.25.1 until 1.35.0, Kiota copies x-ai-capabilities.response_semantics.oauth_card_path from an attacker-controlled or compromised OpenAPI description into a generated API plugin manifest without validating that the value is a safe package-relative file reference. Parent-directory traversal, rooted paths, or absolute URIs can therefore reach a consuming host that resolves the reference, allowing the host to cross the intended plugin-package boundary or use an unintended authentication card. Kiota does not itself read a local file or execute code merely while generating the manifest, and impact requires downstream resolution of the unsafe reference. This issue is fixed in version 1.35.0.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
对路径名的限制不恰当(路径遍历)
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| microsoft | kiota | >= 1.25.1, < 1.35.0 | - |
|
| microsoft | Microsoft.OpenApi.Kiota | >= 1.25.1, < 1.35.0 | - |
|
| microsoft | Microsoft.OpenApi.Kiota.Builder | >= 1.25.1, < 1.35.0 | - |
|
II. Public POCs for CVE-2026-105795
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-105795
请登录查看更多情报信息。
Other References for CVE-2026-105795 (4)
-
https://github.com/microsoft/kiota/pull/8055 x_refsource_MISC
-
https://github.com/microsoft/kiota/releases/tag/v1.35.0 x_refsource_MISC
-
https://github.com/microsoft/kiota/security/advisories/GHSA-6gw6-rv2g-25mg x_refsource_CONFIRM
Same Patch Batch · microsoft · 2026-10-06 · 11 CVEs total
| CVE-2026-105794 | 9.1 CRITICAL | MsQuic: Improper Certificate Validation in Microsoft.Native.Quic.MsQuic.OpenSSL |
| CVE-2026-105793 | 9.1 CRITICAL | Microsoft UFO: Authenticated Android shell command injection in Mobile MCP `press_key` |
| CVE-2026-105797 | 8.8 HIGH | SimpleChat: Command injection via authorization-gate ordering flaw (arbitrary process spaw |
| CVE-2026-105796 | 8.8 HIGH | Kiota: Code injection through doc-comment delimiter reformation in Kiota Java and PHP gene |
| CVE-2026-105788 | 8.8 HIGH | Microsoft UFO: Authenticated Android shell command injection in Mobile MCP type_text and l |
| CVE-2026-105798 | 8.7 HIGH | SimpleChat: Stored XSS via group document filename in inline onclick handler |
| CVE-2026-105791 | 7.5 HIGH | Microsoft UFO: Arbitrary code execution in `run_shell` via `explorer.exe` argument injecti |
| CVE-2026-105792 | 6.5 MEDIUM | Microsoft UFO: Authenticated task-result request can deadlock UFO server session manager |
| CVE-2026-105790 | 6.4 MEDIUM | Microsoft UFO: Authenticated Galaxy device registration can bypass WebSocket SSRF IP pinni |
| CVE-2026-105789 | 5.4 MEDIUM | Microsoft UFO: Arbitrary file write in the Linux MCP `execute_command` tool |
IV. Related Vulnerabilities
Same product: kiota
-
CVE-2026-105796
Kiota: Code injection through doc-comment delimiter reformat -
CVE-2026-73851
Kiota: Path traversal in generated plugin manifest static_te -
CVE-2026-59867
Kiota: Generation-time SSRF + remote/local file inclusion vi -
CVE-2026-59866
Kiota: Arbitrary file write + code-injection via x-ms-kiota- -
CVE-2026-59864
Kiota: Path/URL injection into generated Copilot plugin mani
Same vendor: microsoft
-
CVE-2026-105798
SimpleChat: Stored XSS via group document filename in inline -
CVE-2026-105797
SimpleChat: Command injection via authorization-gate orderin -
CVE-2026-105796
Kiota: Code injection through doc-comment delimiter reformat -
CVE-2026-105794
MsQuic: Improper Certificate Validation in Microsoft.Native. -
CVE-2026-105793
Microsoft UFO: Authenticated Android shell command injection
Same weakness: CWE-22
-
CVE-2026-105840
lrzsz before 0.13.0 Path Traversal via lrz Restricted Mode c -
CVE-2026-105834
Rundeck before 6.2.0 Arbitrary File Read via File Resource M -
CVE-2026-39792
WordPress Simple File List plugin <= 6.3.11 - Arbitrary File -
CVE-2026-39754
WordPress Piotnet Addons For Elementor plugin <= 7.1.71 - Ar -
CVE-2026-39752
WordPress Jobs for WordPress plugin <= 2.8.2 - Arbitrary Fil
V. Comments for CVE-2026-105795
No comments yet