CVE-2026-59861 | Microsoft Kiota up to 1.31.x Code Generator CodeMethodWriter.cs SanitizeForQuotedLiteral var injection

July 16, 2026 Yanac

A vulnerability identified as problematic has been detected in Microsoft Kiota up to 1.31.x. This affects the function SanitizeForQuotedLiteral of the file CodeMethodWriter.cs of the component Code Generator. The manipulation of the argument var leads to injection.

This vulnerability is referenced as CVE-2026-59861. The attack can only be performed from a local environment. No exploit is available.VulDB Recent EntriesRead More