AIKIDO-2026-696230

TL;DR

A path traversal vulnerability allowed attacker-controlled consumer identifiers (and related file reference/config keys) to escape the intended .kiota/documents namespace, enabling overwriting another consumer’s cached OpenAPI description. The fix adds strict validation of consumer identifiers/extensions, canonicalizes paths with GetFullPath, performs containment checks to prevent escaping the documents directory, and hardens file-reference parsing against percent-encoding/double-encoding, control chars (including NUL), and Unicode normalization bypasses.