A generic Microsoft Graph $batch executor (ExecuteBatch) was being autoloaded into the SharePoint Graph toolkit and allows caller-controlled subrequests to be forwarded with the connected account token, which can exercise arbitrary Graph endpoints and destructive operations.
The change aims to remove this unsafe surface so the toolkit only exposes typed, scoped SharePoint actions and preserves intended safety controls.
Description
Removed the autoload import of ExecuteBatch from apps/sharepoint_graph/tool.py so the generic batch executor is not imported into the tool surface.
Removed ExecuteBatch from the SharePointGraph.actions() list in apps/sharepoint_graph/tool.py so the enum SHAREPOINT_GRAPH_EXECUTE_BATCH is no longer registered as an invokable action.
Updated tests/test_apps/test_sharepoint_graph/test_action_registry.py to stop expecting SHAREPOINT_GRAPH_EXECUTE_BATCH and added a regression check that the tool.py source does not contain the ExecuteBatch import or listing.
Testing
Ran uv run pytest tests/test_apps/test_sharepoint_graph/test_action_registry.py -q and the test suite passed (121 passed).
Ran uv run ruff check apps/sharepoint_graph/tool.py tests/test_apps/test_sharepoint_graph/test_action_registry.py and lint checks passed.
Ran git diff --check to confirm no whitespace/patch issues and it reported no problems.
@kaavee315checks…codex/fix-sharepoint-graph-batch-vulnerability → master2 files · +7 −3updated 3d ago