Microsoft Kiota Vulnerabilities

Microsoft Kiota vulnerabilities.

JSON RSS CSV 🔔 Create Alert Trigger

16 July 2026

OpenAPI Code Generator Vulnerability in Microsoft Kiota
CVE-2026-59866
MicrosoftKiota9.3CRITICAL
Path Traversal Vulnerability in Kiota OpenAPI HTTP Client by Microsoft
CVE-2026-59864
MicrosoftKiota9.3CRITICAL
Command Injection Vulnerability in Kiota by Microsoft
CVE-2026-59865
MicrosoftKiota9.3CRITICAL
PHP Code Injection Vulnerability in Kiota HTTP Client Code Generator by Microsoft
CVE-2026-59859
MicrosoftKiota8.7HIGH
Code Injection Vulnerability in Kiota Python Code Generator by Microsoft
CVE-2026-59862
MicrosoftKiota7.5HIGH
Code Injection Vulnerability in Kiota Ruby Generator by Microsoft
CVE-2026-59861
MicrosoftKiota7.5HIGH
Code Generation Injection Vulnerability in Kiota by Microsoft
CVE-2026-59860
MicrosoftKiota8.7HIGH

19 June 2026

Cross-Origin Redirect Vulnerability in Microsoft Kiota API Client Library
CVE-2026-49336
MicrosoftKiota-typescript5.5MEDIUM

14 May 2026

Sensitive Header Exposure in Microsoft Kiota Libraries
CVE-2026-44503
MicrosoftKiota-java7HIGH

22 April 2026

Code Generation Injection Vulnerability in Kiota by Microsoft
CVE-2026-41134
MicrosoftKiota7.3HIGH