sk-cve-2026-26030-lab

CVE-2026-26030 — Semantic Kernel filter eval RCE lab A self-contained lab reproducing CVE-2026-26030 : prompt-injectable remote code execution via the in-memory vector store search filter in Microsoft Semantic Kernel Python, Ethical lab only. Isolated in dedicated virtualenvs; payloads are harmle...

CVE-2026-26030-Microsoft-Semantic-Kernel-1.39.4-RCE

Microsoft Semantic Kernel BPassed to VectorStore query/filter B -- CInMemoryVectorStore evaluates filter expression unsafely C -- DUnsafe attribute resolution via class / base / subclasses D -- EAccess to init.globals containing os and builtins E -- FArbitrary code execution e.g. os.system F --...

pyrit (>=0.2.0, <=0.2.1) potentially affected by CVE-2026-25592 via semantic-kernel (0.9.4b1)

semantic-kernel PYPI version 0.9.4b1 is affected by a known vulnerability. The following packages have a transitive dependency on semantic-kernel and may be impacted: - pyrit =0.2.0, =0.2.1 Source cves: CVE-2026-25592 Source advisory: OSV:PYSEC-2026-531...

agixt (>=1.2.3, <=1.2.13) potentially affected by CVE-2026-25592 via semantic-kernel (0.2.9.dev0)

semantic-kernel PYPI version 0.2.9.dev0 is affected by a known vulnerability. The following packages have a transitive dependency on semantic-kernel and may be impacted: - agixt =1.2.3, =1.2.13 Source cves: CVE-2026-25592 Source advisory: OSV:PYSEC-2026-531...

agixt (1.3.71) potentially affected by CVE-2026-25592 via semantic-kernel (0.3.7.dev0)

semantic-kernel PYPI version 0.3.7.dev0 is affected by a known vulnerability. The following packages have a transitive dependency on semantic-kernel and may be impacted: - agixt 1.3.71 Source cves: CVE-2026-25592 Source advisory: OSV:PYSEC-2026-531...

sonagent (>=1.0.0, <=1.0.9) potentially affected by CVE-2026-25592 via semantic-kernel (0.4.5.dev0)

semantic-kernel PYPI version 0.4.5.dev0 is affected by a known vulnerability. The following packages have a transitive dependency on semantic-kernel and may be impacted: - sonagent =1.0.0, =1.0.9 Source cves: CVE-2026-25592 Source advisory: OSV:PYSEC-2026-531...

agixt (>=1.1.76b0, <=1.2.1b0) potentially affected by CVE-2026-25592 via semantic-kernel (0.3.0.dev0)

semantic-kernel PYPI version 0.3.0.dev0 is affected by a known vulnerability. The following packages have a transitive dependency on semantic-kernel and may be impacted: - agixt =1.1.76b0, =1.2.1b0 Source cves: CVE-2026-25592 Source advisory: OSV:PYSEC-2026-531...

agixt (>=1.2.14, <=1.3.58) potentially affected by CVE-2026-25592 via semantic-kernel (0.3.1.dev0)

semantic-kernel PYPI version 0.3.1.dev0 is affected by a known vulnerability. The following packages have a transitive dependency on semantic-kernel and may be impacted: - agixt =1.2.14, =1.3.58 Source cves: CVE-2026-25592 Source advisory: OSV:PYSEC-2026-531...

agixt (>=1.3.59, <=1.3.70) potentially affected by CVE-2026-25592 via semantic-kernel (0.3.4.dev0)

semantic-kernel PYPI version 0.3.4.dev0 is affected by a known vulnerability. The following packages have a transitive dependency on semantic-kernel and may be impacted: - agixt =1.3.59, =1.3.70 Source cves: CVE-2026-25592 Source advisory: OSV:PYSEC-2026-531...

gptui (0.1.0) potentially affected by CVE-2026-25592 via semantic-kernel (0.3.15.dev0)

semantic-kernel PYPI version 0.3.15.dev0 is affected by a known vulnerability. The following packages have a transitive dependency on semantic-kernel and may be impacted: - gptui 0.1.0 Source cves: CVE-2026-25592 Source advisory: OSV:PYSEC-2026-531...

agentic-kernel (>=0.1.0, <=0.1.10), co-op-translator (>=0.1.1, <=0.5.1) +4 more potentially affected by CVE-2026-25592 via semantic-kernel (>=1.3.0, <=1.35.3)

semantic-kernel PYPI version =1.3.0, =0.1.0, =0.1.1, =0.8.1, =0.1.0, =0.0.1, =0.1.0, =0.2.0 Source cves: CVE-2026-25592 Source advisory: OSV:PYSEC-2026-531...

Semantic Kernel has Arbitrary File Write via AI Agent Function Calling in .NET SDK

ImpactWhat kind of vulnerability is it? Who is impacted?An Arbitrary File Write vulnerability has been identified in Microsoft's Semantic Kernel.NET SDK, specifically within theSessionsPythonPlugin.Developers who have built applications which include Microsoft's Semantic Kernel.NET SDK and are...

PYSEC-2026-531 Semantic Kernel has Arbitrary File Write via AI Agent Function Calling in .NET SDK

Impact What kind of vulnerability is it? Who is impacted? An Arbitrary File Write vulnerability has been identified in Microsoft's Semantic Kernel .NET SDK, specifically within the SessionsPythonPlugin. Developers who have built applications which include Microsoft's Semantic Kernel .NET SDK and...

PT-2026-53600

Impact What kind of vulnerability is it? Who is impacted? An Arbitrary File Write vulnerability has been identified in Microsoft's Semantic Kernel .NET SDK, specifically within the SessionsPythonPlugin. Developers who have built applications which include Microsoft's Semantic Kernel .NET SDK and...

Exploit for Code Injection in Microsoft

CVE-2026-26030 — Semantic Kernel filter eval RCE lab A...

MAL-2026-4760 Malicious code in nvidia-nat-semantic-kernel (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe66a4b0f7f00b8e8a9abd877b3ab0531d56906cc11f6fa6ecaddd4b0bebbbe1 The package's METADATA declares Requires-Dist: ruamel-yaml-clibz==0.3.5, a typosquat of the well-known ruamel-yaml-clib note the trailing 'z'...

Malicious code in nvidia-nat-semantic-kernel (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe66a4b0f7f00b8e8a9abd877b3ab0531d56906cc11f6fa6ecaddd4b0bebbbe1 The package's METADATA declares Requires-Dist: ruamel-yaml-clibz==0.3.5, a typosquat of the well-known ruamel-yaml-clib note the trailing 'z'...

When prompts become shells: RCE vulnerabilities in AI agent frameworks

In this article 1. A representative case study: Semantic Kernel 2. CVE-2026-26030: In-Memory Vector Store 3. CVE-2026-25592: Arbitrary file write through SessionsPythonPlugin 4. The vulnerability 5. Attack chain overview 6. Defending the agentic edge 7. Not bugs, but developed by design 8. CTF...

When prompts become shells: RCE vulnerabilities in AI agent frameworks

In this article 1. A representative case study: Semantic Kernel 2. CVE-2026-26030: In-Memory Vector Store 3. CVE-2026-25592: Arbitrary file write through SessionsPythonPlugin 4. The vulnerability 5. Attack chain overview 6. Defending the agentic edge 7. Not bugs, but developed by design 8. CTF...

K000160730: Microsoft semantic kernel Python SDK vulnerability CVE-2026-26030

Security Advisory Description Semantic Kernel, Microsoft's semantic kernel Python SDK, has a remote code execution vulnerability in versions prior to 1.39.4, specifically within the InMemoryVectorStore filter functionality. The problem has been fixed in version python-1.39.4. Users should upgrade...