CVE-2026-59860 | Microsoft Kiota up to 1.32.2 XML Documentation-Comment Sink injection

July 16, 2026 Yanac

A vulnerability classified as problematic has been found in Microsoft Kiota up to 1.32.2. The affected element is an unknown function of the component XML Documentation-Comment Sink. Performing a manipulation results in injection.

This vulnerability is cataloged as CVE-2026-59860. The attack must be initiated from a local position. There is no exploit available.VulDB Recent EntriesRead More