KI
Product
kiota
13
CVEs
0
On KEV
9.3
Max CVSS
2
New 30D
Severity mix
Critical 3High 8Medium 1Low 1
Watch
Add kiota to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-59866 | 9.3 | Jul 16 | Kiota: Arbitrary file write + code-injection via x-ms-kiota-info clientClassName and clientNamespaceName Affected: >= 1.30.0, < 1.31.1; < 1.29.1 |
| CVE-2026-59864 | 9.3 | Jul 16 | Kiota: Path/URL injection into generated Copilot plugin manifest via x-ai-* extensions Affected: >= 1.30.0, < 1.31.1; < 1.29.1 |
| CVE-2026-59865 | 9.3 | Jul 16 | Kiota: Command injection via x-ms-kiota-info dependencyInstallCommand surfaced by `kiota info` Affected: >= 1.30.0, < 1.31.1; < 1.29.1 |
Showing 3