{"id":"CVE-2026-73851","sourceIdentifier":"security-advisories@github.com","published":"2026-08-17T15:16:57.980","lastModified":"2026-10-24T15:10:00.190","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Kiota is an OpenAPI based HTTP Client code generator. Prior to 1.29.1 and 1.34.0, an attacker who controls or tampers with the OpenAPI description consumed by Kiota can supply a file reference that resolves outside the manifest package (e.g. ../../../../etc/passwd, an absolute path, or a file:// / http(s):// URI). When the generated manifest is deployed and consumed by an AI host, this can lead to inclusion or disclosure of files outside the intended package boundary. This vulnerability is fixed in 1.29.1 and 1.34.0."},{"lang":"es","value":"Kiota es un generador de código de cliente HTTP basado en OpenAPI. Antes de las versiones 1.29.1 y 1.34.0, un atacante que controla o manipula la descripción de OpenAPI consumida por Kiota puede proporcionar una referencia de archivo que se resuelve fuera del paquete del manifiesto (por ejemplo, .. / .. / .. / .. / etc/p4ssd, una ruta absoluta o una URI file: // / http(s)://). Cuando el manifiesto generado se despliega y es consumido por un host de IA, esto puede llevar a la inclusión o divulgación de archivos fuera del límite del paquete previsto. Esta vulnerabilidad está corregida en las versiones 1.29.1 y 1.34.0."}],"affected":[{"source":"security-advisories@github.com","affectedData":[{"vendor":"microsoft","product":"kiota","versions":[{"version":">= 1.30.0, < 1.34.0","status":"affected"},{"version":"< 1.29.1","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"security-advisories@github.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"ACTIVE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-17T15:26:24.544956Z","id":"CVE-2026-73851","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"security-advisories@github.com","type":"Secondary","description":[{"lang":"en","value":"CWE-22"},{"lang":"en","value":"CWE-829"}]}],"references":[{"url":"https://github.com/microsoft/kiota/commit/430008e9d700b3fe80f206c672415cfbd8e830e7","source":"security-advisories@github.com"},{"url":"https://github.com/microsoft/kiota/commit/de3d18d9fe31ced4ac749728d3a2f94811f59268","source":"security-advisories@github.com"},{"url":"https://github.com/microsoft/kiota/issues/7912","source":"security-advisories@github.com"},{"url":"https://github.com/microsoft/kiota/pull/7910","source":"security-advisories@github.com"},{"url":"https://github.com/microsoft/kiota/pull/7913","source":"security-advisories@github.com"},{"url":"https://github.com/microsoft/kiota/releases/tag/v1.29.1","source":"security-advisories@github.com"},{"url":"https://github.com/microsoft/kiota/releases/tag/v1.34.0","source":"security-advisories@github.com"},{"url":"https://github.com/microsoft/kiota/security/advisories/GHSA-p5rm-jg5c-8c77","source":"security-advisories@github.com"}]}