CyberRota Analysis
AI-GeneratedKiota, an OpenAPI-based HTTP client code generator, is vulnerable to improper sanitization of client class and namespace names, allowing attackers to manipulate generated source files and potentially write them outside the designated output directory. This could lead to arbitrary code injection in class or namespace declarations, posing a risk to applications that rely on compromised OpenAPI descriptions. Developers and organizations using Kiota versions prior to 1.32.5 should prioritize updating to the latest version to mitigate this risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Kiota is an OpenAPI based HTTP Client code generator. Prior to 1.32.5, Kiota emitted x-ms-kiota-info clientClassName and clientNamespaceName values without identifier or path sanitization as both generated client class or namespace names and generated output path components when `kiota generate` ran without -c/--class-name, allowing an attacker-controlled or compromised OpenAPI description to write generated source outside the -o output directory and inject arbitrary text into generated class or namespace declarations. This issue is fixed in version 1.32.5 by GenerationConfiguration.SanitizeClientClassName and SanitizeClientNamespaceName.