agixt (>=1.1.76b0, <=1.2.1b0) potentially affected by CVE-2026-26030 via semantic-kernel (0.3.0.dev0)

semantic-kernel PYPI version 0.3.0.dev0 is affected by a known vulnerability. The following packages have a transitive dependency on semantic-kernel and may be impacted: - agixt =1.1.76b0, =1.2.1b0 Source cves: CVE-2026-26030 Source advisory: OSV:PYSEC-2026-163...

pyrit (>=0.2.0, <=0.2.1) potentially affected by CVE-2026-26030 via semantic-kernel (0.9.4b1)

semantic-kernel PYPI version 0.9.4b1 is affected by a known vulnerability. The following packages have a transitive dependency on semantic-kernel and may be impacted: - pyrit =0.2.0, =0.2.1 Source cves: CVE-2026-26030 Source advisory: OSV:PYSEC-2026-163...

agixt (>=1.2.14, <=1.3.58) potentially affected by CVE-2026-26030 via semantic-kernel (0.3.1.dev0)

semantic-kernel PYPI version 0.3.1.dev0 is affected by a known vulnerability. The following packages have a transitive dependency on semantic-kernel and may be impacted: - agixt =1.2.14, =1.3.58 Source cves: CVE-2026-26030 Source advisory: OSV:PYSEC-2026-163...

agixt (>=1.3.59, <=1.3.70) potentially affected by CVE-2026-26030 via semantic-kernel (0.3.4.dev0)

semantic-kernel PYPI version 0.3.4.dev0 is affected by a known vulnerability. The following packages have a transitive dependency on semantic-kernel and may be impacted: - agixt =1.3.59, =1.3.70 Source cves: CVE-2026-26030 Source advisory: OSV:PYSEC-2026-163...

agixt (1.3.71) potentially affected by CVE-2026-26030 via semantic-kernel (0.3.7.dev0)

semantic-kernel PYPI version 0.3.7.dev0 is affected by a known vulnerability. The following packages have a transitive dependency on semantic-kernel and may be impacted: - agixt 1.3.71 Source cves: CVE-2026-26030 Source advisory: OSV:PYSEC-2026-163...

gptui (0.1.0) potentially affected by CVE-2026-26030 via semantic-kernel (0.3.15.dev0)

semantic-kernel PYPI version 0.3.15.dev0 is affected by a known vulnerability. The following packages have a transitive dependency on semantic-kernel and may be impacted: - gptui 0.1.0 Source cves: CVE-2026-26030 Source advisory: OSV:PYSEC-2026-163...

sonagent (>=1.0.0, <=1.0.9) potentially affected by CVE-2026-26030 via semantic-kernel (0.4.5.dev0)

semantic-kernel PYPI version 0.4.5.dev0 is affected by a known vulnerability. The following packages have a transitive dependency on semantic-kernel and may be impacted: - sonagent =1.0.0, =1.0.9 Source cves: CVE-2026-26030 Source advisory: OSV:PYSEC-2026-163...

agentic-kernel (>=0.1.0, <=0.1.10), co-op-translator (>=0.1.1, <=0.5.1) +4 more potentially affected by CVE-2026-26030 via semantic-kernel (>=1.3.0, <=1.35.3)

semantic-kernel PYPI version =1.3.0, =0.1.0, =0.1.1, =0.8.1, =0.1.0, =0.0.1, =0.1.0, =0.2.0 Source cves: CVE-2026-26030 Source advisory: OSV:PYSEC-2026-163...

CVE-2026-26030

Semantic Kernel, Microsoft's semantic kernel Python SDK, has a remote code execution vulnerability in versions prior to 1.39.4, specifically within the InMemoryVectorStore filter functionality. The problem has been fixed in version python-1.39.4. Users should upgrade this version or higher. As a...

PYSEC-2026-163

Semantic Kernel, Microsoft's semantic kernel Python SDK, has a remote code execution vulnerability in versions prior to 1.39.4, specifically within the InMemoryVectorStore filter functionality. The problem has been fixed in version python-1.39.4. Users should upgrade this version or higher. As a...

CVE-2026-26030 Microsoft Semantic Kernel InMemoryVectorStore filter functionality vulnerable to remote code execution

Semantic Kernel, Microsoft's semantic kernel Python SDK, has a remote code execution vulnerability in versions prior to 1.39.4, specifically within the InMemoryVectorStore filter functionality. The problem has been fixed in version python-1.39.4. Users should upgrade this version or higher. As a...

CVE-2026-26030 Microsoft Semantic Kernel InMemoryVectorStore filter functionality vulnerable to remote code execution

Semantic Kernel, Microsoft's semantic kernel Python SDK, has a remote code execution vulnerability in versions prior to 1.39.4, specifically within the InMemoryVectorStore filter functionality. The problem has been fixed in version python-1.39.4. Users should upgrade this version or higher. As a...

CVE-2026-26030 Microsoft Semantic Kernel InMemoryVectorStore filter functionality vulnerable to remote code execution

Semantic Kernel, Microsoft's semantic kernel Python SDK, has a remote code execution vulnerability in versions prior to 1.39.4, specifically within the InMemoryVectorStore filter functionality. The problem has been fixed in version python-1.39.4. Users should upgrade this version or higher. As a...

CVE-2026-26030

Summary of CVE-2026-26030 : The issue affects Microsoft’s Semantic Kernel Python SDK, specifically the InMemoryVectorStore filter functionality. Versions prior to 1.39.4 are vulnerable to remote code execution. The vulnerability is mitigated by upgrading to python-1.39.4 or higher; as a workaroun...

agentic-kernel (>=0.1.0, <=0.1.10), agixt (>=1.1.76b0, <=1.3.71) +8 more potentially affected by CVE-2026-26030 via semantic-kernel (>=0.2.9.dev0, <=1.35.3)

semantic-kernel PYPI version =0.2.9.dev0, =0.1.0, =1.1.76b0, =0.1.1, =0.8.1, =0.1.0, =0.2.0, =0.0.1, =0.1.0, =1.0.0, =1.0.9 Source cves: CVE-2026-26030 Source advisory: MEND:CVE-2026-26030...

CVE-2026-26030

Semantic Kernel, Microsoft's semantic kernel Python SDK, has a remote code execution vulnerability in versions prior to 1.39.4, specifically within the "InMemoryVectorStore" filter functionality. The problem has been fixed in version "python-1.39.4". Users should upgrade this version or higher. A...

Microsoft Semantic Kernel Code Injection Vulnerability

Microsoft Semantic Kernel is a large model orchestration framework from Microsoft Corporation, USA. A code injection vulnerability exists in Microsoft Semantic Kernel versions prior to 1.39.4. The vulnerability stems from the InMemoryVectorStore filtering feature failing to properly filter specia...

PT-2026-20868

Name of the Vulnerable Software and Affected Versions Semantic Kernel Python SDK versions prior to 1.39.4 Description A remote code execution issue exists within the InMemoryVectorStore filter functionality. Recommendations Update to version 1.39.4 or higher. As a temporary workaround, avoid usin...

CVE-2026-26030: Improper Control of Generation of Code

Semantic Kernel, Microsoft's semantic kernel Python SDK, has a remote code execution vulnerability in versions prior to 1.39.4, specifically within the InMemoryVectorStore filter functionality. The problem has been fixed in version python-1.39.4. Users should upgrade this version or higher. As a...

Arbitrary File Write

Semantic Kernel is vulnerable to Arbitrary File Write. The vulnerability is due to insufficient validation of file paths in the SessionsPythonPlugin, where attacker-controlled localFilePath arguments passed to DownloadFileAsync or UploadFileAsync can write files to arbitrary locations on the host...