CVE-2026-26030

🗓️ 19 Feb 2026 16:00:55Reported by GitHub_MType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 19 Views

Semantic Kernel InMemoryVectorStore filter enables remote code execution upgrade to python-1.39.4.

Reporter	Title	Published	Views	Family All 22
GithubExploit	Exploit for CVE-2026-26030	24 Feb 202616:50	–	githubexploit
Circl	CVE-2026-26030	19 Feb 202618:01	–	circl
CNNVD	Microsoft Semantic Kernel 代码注入漏洞	19 Feb 202600:00	–	cnnvd
CNVD	Microsoft Semantic Kernel Code Injection Vulnerability	6 Mar 202600:00	–	cnvd
Cvelist	CVE-2026-26030 Microsoft Semantic Kernel InMemoryVectorStore filter functionality vulnerable to remote code execution	19 Feb 202616:00	–	cvelist
F5 Networks	K000160730: Microsoft semantic kernel Python SDK vulnerability CVE-2026-26030	13 Apr 202607:18	–	f5
Github Security Blog	Microsoft Semantic Kernel InMemoryVectorStore filter functionality vulnerable to remote code execution	19 Feb 202619:34	–	github
Kaspersky	KLA90920 Multiple vulnerabilities in Microsoft Open Source Software	10 Mar 202600:00	–	kaspersky
Microsoft CVE	GitHub: CVE-2026-26030 Microsoft Semantic Kernel InMemoryVectorStore filter functionality vulnerable	10 Mar 202614:00	–	mscve
Microsoft Secure	When prompts become shells: RCE vulnerabilities in AI agent frameworks	7 May 202620:22	–	mssecure

NVD

Vulners

Node

microsoft semantic_kernelRange<1.39.4python

[
  {
    "vendor": "microsoft",
    "product": "semantic-kernel",
    "versions": [
      {
        "version": "< 1.39.4",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/microsoft/semantic-kernel/security/advisories/GHSA-xjw9-4gw8-4rqx
github	www.github.com/microsoft/semantic-kernel/pull/13505
github	www.github.com/microsoft/semantic-kernel/releases/tag/python-1.39.4

03 Mar 2026 16:32Current

6.3Medium risk

Vulners AI Score6.3

CVSS 3.19.9

EPSS0.00103

SSVC

CWE-94