# CVE-2026-41134: Microsoft Kiota code injection in generated clients

Source: https://junglewise.ai/threats/cve-2026-41134-microsoft-kiota-code-injection-in-generated-clients  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-04-22. Updated: 2026-07-21  
License: CC BY 4.0 with a link back

CVE-2026-41134 · Severity: high · CVSS 7.8 · Published 2026-04-22

Microsoft Kiota is a tool used by developers to automatically generate software code (API clients) from technical descriptions of web services. A security flaw allows a malicious or compromised API description to inject hidden, unauthorized code into the generated software. If a developer uses an untrusted description, the resulting application could contain malicious logic that compromises data or system security.

Technologies: [Microsoft Kiota](https://junglewise.ai/threats/technologies/kiota), [Microsoft.OpenApi.Kiota](https://junglewise.ai/threats/technologies/microsoft-openapi-kiota), [Microsoft.OpenApi.Kiota.Builder](https://junglewise.ai/threats/technologies/microsoft-openapi-kiota-builder), [Microsoft.OpenApi.Kiota (NuGet)](https://junglewise.ai/threats/technologies/nuget-microsoft-openapi-kiota), [Microsoft.OpenApi.Kiota.Builder (NuGet)](https://junglewise.ai/threats/technologies/nuget-microsoft-openapi-kiota-builder). Vendors: [Microsoft](https://junglewise.ai/threats/vendors/microsoft), [NuGet](https://junglewise.ai/threats/vendors/nuget).

## Quick answers

**Is CVE-2026-41134 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-41134 being exploited in the wild.

**How severe is CVE-2026-41134?** High severity, with a CVSS score of 7.8, published 22 April 2026.

**Which products and versions are affected?** Microsoft Kiota < 1.31.1; Microsoft.OpenApi.Kiota < 1.31.1; Microsoft.OpenApi.Kiota.Builder < 1.31.1; Microsoft.OpenApi.Kiota (NuGet) ECOSYSTEM:introduced=1.30.0,fixed=1.31.1; and 1 more.

**Is there a fix for CVE-2026-41134?** Yes. Microsoft.OpenApi.Kiota (NuGet): upgrade to 1.31.1 or later; Microsoft.OpenApi.Kiota.Builder (NuGet): upgrade to 1.31.1 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-41134 attacked?** It is attacked with local access, in a software library.

**Am I affected by CVE-2026-41134?** Check whether you run Microsoft Kiota, Microsoft.OpenApi.Kiota, Microsoft.OpenApi.Kiota.Builder or one of the others listed at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- Microsoft.OpenApi.Kiota (NuGet): upgrade to 1.31.1 or later

  ```sh
  dotnet add package Microsoft.OpenApi.Kiota --version 1.31.1
  ```

- Microsoft.OpenApi.Kiota.Builder (NuGet): upgrade to 1.31.1 or later

  ```sh
  dotnet add package Microsoft.OpenApi.Kiota.Builder --version 1.31.1
  ```


## Technical details

Kiota versions prior to 1.31.1 contain a code-generation literal injection vulnerability (CWE-94). The root cause is insufficient escaping of values from OpenAPI descriptions (such as default values, property names, or parameter mappings) when they are emitted into generated source code. An attacker who provides a malicious OpenAPI document can escape string literal contexts to inject arbitrary statements into the resulting client library. Exploitation requires a developer to run Kiota against a compromised or untrusted OpenAPI specification. The issue is fixed in version 1.31.1, and users are advised to regenerate existing clients after upgrading.

## Affected products

- Microsoft Kiota < 1.31.1
- Microsoft Microsoft.OpenApi.Kiota < 1.31.1
- Microsoft Microsoft.OpenApi.Kiota.Builder < 1.31.1

## Identifiers

- CVE-2026-41134
- GHSA-2hx3-vp6r-mg3f

## Timeline

- 2026-04-13: disclosed: Initial disclosure in microsoft/kiota repository
- 2026-04-14: advisory: GitHub Advisory published
- 2026-04-22: other: Published to NVD

## References

- [https://api.github.com/users/baywet](https://api.github.com/users/baywet)
- [https://github.com/baywet](https://github.com/baywet)
- [https://api.github.com/users/baywet/gists%7B/gist_id%7D](https://api.github.com/users/baywet/gists%7B/gist_id%7D)
- [https://api.github.com/users/baywet/repos](https://api.github.com/users/baywet/repos)
- [https://avatars.githubusercontent.com/u/7905502?v=4](https://avatars.githubusercontent.com/u/7905502?v=4)
- [https://api.github.com/users/baywet/events%7B/privacy%7D](https://api.github.com/users/baywet/events%7B/privacy%7D)

## Related threats

- [Microsoft Kiota documentation-comment injection in Java and PHP](https://junglewise.ai/threats/cve-2026-105796-kiota-is-an-openapi-based-http-client-code-generator-from-0-5-0)
- [Kiota: Unsafe oauth_card_path references in Kiota-generated API plugin manifests](https://junglewise.ai/threats/cve-2026-105795-kiota-is-an-openapi-based-http-client-code-generator-from-1-25-1)
- [Microsoft Kiota path traversal in plugin manifest via percent-encoding bypass](https://junglewise.ai/threats/cve-2026-73851-microsoft-kiota-path-traversal-in-plugin-manifest-via-percent)
- [Microsoft Kiota SSRF and File Inclusion via OpenAPI external references](https://junglewise.ai/threats/cve-2026-59867-microsoft-kiota-ssrf-and-file-inclusion-via-openapi-external)
- [Microsoft Kiota path traversal and code injection in OpenAPI generation](https://junglewise.ai/threats/cve-2026-59866-microsoft-kiota-path-traversal-and-code-injection-in-openapi)