CVE-2026-59859 | Microsoft Kiota up to 1.32.3 Code Generator StringExtensions.cs SanitizeDoubleQuote var injection

July 16, 2026 Yanac

A vulnerability categorized as problematic has been discovered in Microsoft Kiota up to 1.32.3. Affected by this issue is the function SanitizeDoubleQuote of the file Writers/StringExtensions.cs of the component Code Generator. Executing a manipulation of the argument var can lead to injection.

The identification of this vulnerability is CVE-2026-59859. The attack can only be executed locally. There is no exploit available.VulDB Recent EntriesRead More