Kiota is an OpenAPI‑based HTTP client code generator. Before versions 1.29.1 and 1.32.5, the tool would honour a poisoned .kiota/workspace.json configuration file without checking the outputPath values supplied for either a client or a plugin during the kiota client generate or kiota plugin generate commands. The unchecked values could be absolute system paths, rooted POSIX paths, UNC paths, Windows drive letters, or include traversal segments, allowing a malicious repository or pull request to cause Kiota to write generated files anywhere outside the intended workspace on the developer or CI host. This flaw permits an attacker who can influence the workspace configuration to overwrite system files, inject malicious code, or create files that later execute, thereby creating a serious compromise vector.

All installations of Microsoft Kiota using versions prior to 1.32.5 are affected. The flaw surfaces whenever the kiota client generate or kiota plugin generate commands are run against a workspace.json that is not properly sanitized, regardless of platform. Any environment that executes Kiota as part of a CI pipeline or local development workflow is therefore at risk.

The CVSS score of 7 indicates high severity. The EPSS score of 1% indicates a small but non‑zero probability of exploitation, and the vulnerability is not listed in the CISA KEV catalog. The likely attack vector is inferred to involve embedding a malicious workspace configuration in a repository or pull request so that when a developer or CI system runs Kiota, it writes files outside the intended directory; this could lead to privilege escalation or remote code execution if the generated files are later executed as part of a build or runtime process.