CVE-2026-105795 | Microsoft Kiota up to 1.34.x Plugin Manifest path traversal

October 6, 2026 Yanac

A vulnerability was found in Microsoft Kiota up to 1.34.x. It has been classified as problematic. This vulnerability affects unknown code of the component Plugin Manifest. This manipulation of the argument x-ai-capabilities.response_semantics.oauth_card_path causes path traversal.

This vulnerability is tracked as CVE-2026-105795. The attack is possible to be carried out remotely. No exploit exists.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More