CVE-2026-59865 | microsoft kiota up to 1.32.4 info command dependencyInstallCommand command injection

July 16, 2026 Yanac

A vulnerability was found in microsoft kiota up to 1.32.4. It has been rated as problematic. This vulnerability affects unknown code of the component info command. The manipulation of the argument dependencyInstallCommand leads to command injection.

This vulnerability is uniquely identified as CVE-2026-59865. Local access is required to approach this attack. No exploit exists.VulDB Recent EntriesRead More