Am I affected by Microsoft Kiota: Path/URL injection into generated Copilot plugin manifest via x-ai-*…? What should I do?
kiota plugin add/kiota plugin generate(with-t APIPlugin) emits an attacker-controlledstatic_template.filepath from the AI-plugin extensions (x-ai-adaptive-card,x-ai-capabilities) verbatim, with no path validation, into the generated Microsoft 365 Copilot / Teams plugin manifest…Affected: Microsoft.OpenApi.Kiota and Microsoft.OpenApi.Kiota.Builder < 1.29.1 and >= 1.30.0, < 1.32.5. Fixed in: 1.29.1 and 1.32.5. What should you check, and what should you do about it?
Full incident page with sources: https://agentarmorhq.com/incidents/2026/07/cve-2026-59864-microsoft-kiota (opens external site)
1 answer
Am I affected? Affected: Microsoft.OpenApi.Kiota and Microsoft.OpenApi.Kiota.Builder < 1.29.1 and >= 1.30.0, < 1.32.5. Fixed in: 1.29.1 and 1.32.5.
What to do now
- Upgrade to Kiota 1.29.1, 1.32.5 or later and regenerate affected plugins.
General practice, not from the source: if the affected software could read tokens or credentials, rotate them after upgrading; pin versions and review changes before updating tools your agents run.
Sources
- GitHub Advisory Database: https://github.com/advisories/GHSA-4jwf-m4wg-8p66 (opens external site)
Full incident page: https://agentarmorhq.com/incidents/2026/07/cve-2026-59864-microsoft-kiota (opens external site)
Did this work for you?