Kiota, an OpenAPI‑based HTTP client code generator, fails to validate file references in the generated plugin manifest. A malicious OpenAPI definition can specify a path that resolves outside the intended package—such as ../.. paths, absolute file system locations, or http/https:// URLs—allowing the generated manifest to reference files like /etc/passwd. This flaw is a classic path traversal (CWE‑22) compounded by a configuration inclusion weakness (CWE‑829), and it can lead to disclosure of sensitive data through the AI host that consumes the manifest.

Microsoft Kiota. Versions before 1.29.1 and 1.34.0 are vulnerable. Updating to any release from 1.29.1 onward removes the issue.

The CVSS base score of 6.1 indicates a moderate severity vulnerability. With an EPSS score of 1%, the probability of exploitation is low, and the vulnerability is not listed in the CISA KEV catalog. An attacker must supply a tampered OpenAPI description that Kiota processes to generate a manifest, and the consuming host must resolve the unvalidated reference. While this limits the attack surface to environments that ingest third‑party OpenAPI specifications—such as CI/CD pipelines or developer tooling—the impact is a disclosure of files outside the package boundary.