Kiota is an OpenAPI based HTTP Client code generator. Prior to versions 1.29.1 and 1.32.5, the tool’s kiota info command read the OpenAPI specification field x-ms-kiota-info.languagesInformation.<language>.dependencyInstallCommand and the associated dependency name and version values, presenting the spec‑supplied command as the recommended install command. An attacker who controls or compromises the specification can embed arbitrary shell commands in that field. If the suggested command is run manually or automatically by the Kiota VS Code extension’s kiota info --json dependency‑install flow, the injected commands execute with the privileges of the user running Kiota, delivering a full remote command execution vulnerability. The weakness is classified as CWE‑829 (Command Injection) and also involves CWE‑94 (Improper Input Sanitization).

The vulnerability affects the Microsoft Kiota project. Versions prior to 1.29.1 and 1.32.5 are vulnerable; version 1.32.5 and later contain the fix and are not affected. The advisory includes Microsoft Kiota as the sole impacted vendor.

The CVSS score of 9.3 reflects a high severity, with full adversary privileges when the command is executed. The EPSS score of 4% indicates a low but non‑zero likelihood of exploitation, though the attacker would still need an attacker‑controlled OpenAPI specification and a user or extension that processes it. The vulnerability is not listed in the CISA KEV catalog. Attackers can exploit this via the Kiota command‑line interface or the VS Code extension if it auto‑executes dependency‑install commands, making it most dangerous in environments where untrusted specifications are processed without validation.