Labs

Short research notes on newly disclosed vulnerabilities: the problem, the payload, and the fix.

• criticalCVE-2026-59865

  CVE-2026-59865: Microsoft Kiota Command Injection via x-ms-kiota-info dependencyInstallCommand

  An attacker who controls or compromises an OpenAPI description can inject an arbitrary shell command into the 'dependencyInstallCommand' field of the x-ms-kiota-info extension, which kiota info…

• critical

  Velocityjs Remote Code Execution via Property-Read to Function Constructor

  A critical flaw in the velocityjs template engine lets an attacker run arbitrary shell commands on the server by walking the JavaScript prototype chain inside a Velocity template, bypassing the…

• high

  GitPython: git-config section-name injection leads to core.sshCommand RCE

  GitPython lets an attacker-controlled submodule name break out of a git-config section header and inject arbitrary directives like core.sshCommand, which git executes on the next SSH operation.

• critical

  @prompty/core Server-Side Template Injection to Remote Code Execution

  The @prompty/core TypeScript runtime rendered untrusted .prompty template files through an unsandboxed Nunjucks engine, letting an attacker traverse JavaScript prototype chains to execute arbitrary…

• high

  PostCSS Path Traversal via sourceMappingURL Leads to Arbitrary .map File Disclosure

  PostCSS blindly follows attacker-controlled sourceMappingURL paths in CSS comments, allowing any .map file on the server's filesystem to be read and leaked through the generated source map output.

• highCVE-2026-59860

  CVE-2026-59860: Microsoft.OpenApi.Kiota XML Doc-Comment Newline Breakout Code Injection

  Kiota generates C# API clients from OpenAPI descriptions, and before version 1.32.3 it wrote description text directly into XML doc comments without removing newline characters, letting anyone who…

• high

  @better-auth/stripe: Cross-Organization Billing Authorization Bypass

  A signed-in member of multiple organizations can cancel, change, restore, or open the billing portal for an org they do not manage, by passing a permitted org ID in the query string while the server…

• highCVE-2026-59862

  CVE-2026-59862: Microsoft Kiota Python Generator Code Injection via Enum Description

  A malicious OpenAPI specification can inject arbitrary Python code into Kiota-generated SDK files, which then executes automatically when a developer or CI pipeline imports the generated module.

• highCVE-2026-59859

  CVE-2026-59859: Microsoft.OpenApi.Kiota PHP Code Generation Literal Injection

  Kiota's PHP code generator copies raw strings from an OpenAPI spec directly into double-quoted PHP string literals without escaping the dollar sign, so an attacker who controls the spec can inject…

• criticalCVE-2026-59864

  CVE-2026-59864: Microsoft.OpenApi.Kiota Path Traversal via x-ai-* OpenAPI Extensions

  Kiota's plugin generator copies attacker-controlled file paths from OpenAPI x-ai-* extensions straight into the generated Copilot plugin manifest with no validation, letting a malicious API…

• highCVE-2026-57516

  CVE-2026-57516: Ray read_webdataset Arbitrary Code Execution via Default Pickle Decoder

  Calling ray.data.read_webdataset() on a malicious TAR archive executes attacker-controlled code automatically, because the default decoder passes .pkl and .pt file contents straight to pickle.loads()…

• high

  better-auth Pre-Account Hijacking via Magic-Link and Email-OTP Sign-In

  An attacker who registers with a victim's email address before the victim first signs in can plant a password that keeps working after the victim proves ownership via a magic link or email OTP…