CVE-2026-25592

Semantic Kernel is an SDK used to build, orchestrate, and deploy AI agents and multi-agent systems. Prior to 1.71.0, an Arbitrary File Write vulnerability has been identified in Microsoft's Semantic Kernel .NET SDK, specifically within the SessionsPythonPlugin. The problem has been fixed in...

Directory Traversal

Overview semantic-kernel is a Semantic Kernel Python SDK Affected versions of this package are vulnerable to Directory Traversal via the SessionsPythonPlugin process. An attacker can write arbitrary files to the filesystem by supplying crafted arguments to the DownloadFileAsync or UploadFileAsync...

agentic-kernel (>=0.1.0, <=0.1.10), co-op-translator (>=0.1.1, <=0.5.1) +4 more potentially affected by CVE-2026-25592 via semantic-kernel (>=1.3.0, <=1.35.3)

semantic-kernel PYPI version =1.3.0, =0.1.0, =0.1.1, =0.8.1, =0.1.0, =0.0.1, =0.1.0, =0.2.0 Source cves: CVE-2026-25592 Source advisory: SNYK:PYTHON-SEMANTICKERNEL-15248428...

CVE-2026-25592

Semantic Kernel is an SDK used to build, orchestrate, and deploy AI agents and multi-agent systems. Prior to 1.71.0, an Arbitrary File Write vulnerability has been identified in Microsoft's Semantic Kernel .NET SDK, specifically within the SessionsPythonPlugin. The problem has been fixed in...

CVE-2026-25592

Semantic Kernel is an SDK used to build, orchestrate, and deploy AI agents and multi-agent systems. Prior to 1.70.0, an Arbitrary File Write vulnerability has been identified in Microsoft's Semantic Kernel .NET SDK, specifically within the SessionsPythonPlugin. The problem has been fixed in...

CVE-2026-25592

The CVE-2026-25592 entry affects Microsoft's Semantic Kernel .NET SDK, specifically the SessionsPythonPlugin, with an Arbitrary File Write vulnerability present prior to version 1.70.0. The issue allows writing files to arbitrary locations via the plugin, and the fixed version is Microsoft.Semant...

CVE-2026-25592

Semantic Kernel is an SDK used to build, orchestrate, and deploy AI agents and multi-agent systems. Prior to 1.71.0, an Arbitrary File Write vulnerability has been identified in Microsoft's Semantic Kernel .NET SDK, specifically within the SessionsPythonPlugin. The problem has been fixed in...

EUVD-2026-5582

Semantic Kernel is an SDK used to build, orchestrate, and deploy AI agents and multi-agent systems. Prior to 1.70.0, an Arbitrary File Write vulnerability has been identified in Microsoft's Semantic Kernel .NET SDK, specifically within the SessionsPythonPlugin. The problem has been fixed in...

CVE-2026-25592 Semantic Kernel has an Arbitrary File Write via AI Agent Function Calling in .NET SDK

Semantic Kernel is an SDK used to build, orchestrate, and deploy AI agents and multi-agent systems. Prior to 1.71.0, an Arbitrary File Write vulnerability has been identified in Microsoft's Semantic Kernel .NET SDK, specifically within the SessionsPythonPlugin. The problem has been fixed in...

agentic-kernel (>=0.1.0, <=0.1.10), agixt (>=1.1.76b0, <=1.3.71) +8 more potentially affected by CVE-2026-25592 via semantic-kernel (>=0.2.9.dev0, <=1.35.3)

semantic-kernel PYPI version =0.2.9.dev0, =0.1.0, =1.1.76b0, =0.1.1, =0.8.1, =0.1.0, =0.2.0, =0.0.1, =0.1.0, =1.0.0, =1.0.9 Source cves: CVE-2026-25592 Source advisory: MEND:CVE-2026-25592...

CVE-2026-25592 Semantic Kernel has an Arbitrary File Write via AI Agent Function Calling in .NET SDK

Semantic Kernel is an SDK used to build, orchestrate, and deploy AI agents and multi-agent systems. Prior to 1.71.0, an Arbitrary File Write vulnerability has been identified in Microsoft's Semantic Kernel .NET SDK, specifically within the SessionsPythonPlugin. The problem has been fixed in...

CVE-2026-25592 Semantic Kernel has an Arbitrary File Write via AI Agent Function Calling in .NET SDK

Semantic Kernel is an SDK used to build, orchestrate, and deploy AI agents and multi-agent systems. Prior to 1.71.0, an Arbitrary File Write vulnerability has been identified in Microsoft's Semantic Kernel .NET SDK, specifically within the SessionsPythonPlugin. The problem has been fixed in...

pyrit (>=0.2.0, <=0.2.1) potentially affected by CVE-2026-25592 via semantic-kernel (0.9.4b1)

semantic-kernel PYPI version 0.9.4b1 is affected by a known vulnerability. The following packages have a transitive dependency on semantic-kernel and may be impacted: - pyrit =0.2.0, =0.2.1 Source cves: CVE-2026-25592 Source advisory: OSV:GHSA-2WW3-72RP-WPP4...

agixt (>=1.2.3, <=1.2.13) potentially affected by CVE-2026-25592 via semantic-kernel (0.2.9.dev0)

semantic-kernel PYPI version 0.2.9.dev0 is affected by a known vulnerability. The following packages have a transitive dependency on semantic-kernel and may be impacted: - agixt =1.2.3, =1.2.13 Source cves: CVE-2026-25592 Source advisory: OSV:GHSA-2WW3-72RP-WPP4...

agixt (>=1.1.76b0, <=1.2.1b0) potentially affected by CVE-2026-25592 via semantic-kernel (0.3.0.dev0)

semantic-kernel PYPI version 0.3.0.dev0 is affected by a known vulnerability. The following packages have a transitive dependency on semantic-kernel and may be impacted: - agixt =1.1.76b0, =1.2.1b0 Source cves: CVE-2026-25592 Source advisory: OSV:GHSA-2WW3-72RP-WPP4...

agixt (>=1.2.14, <=1.3.58) potentially affected by CVE-2026-25592 via semantic-kernel (0.3.1.dev0)

semantic-kernel PYPI version 0.3.1.dev0 is affected by a known vulnerability. The following packages have a transitive dependency on semantic-kernel and may be impacted: - agixt =1.2.14, =1.3.58 Source cves: CVE-2026-25592 Source advisory: OSV:GHSA-2WW3-72RP-WPP4...

agixt (>=1.3.59, <=1.3.70) potentially affected by CVE-2026-25592 via semantic-kernel (0.3.4.dev0)

semantic-kernel PYPI version 0.3.4.dev0 is affected by a known vulnerability. The following packages have a transitive dependency on semantic-kernel and may be impacted: - agixt =1.3.59, =1.3.70 Source cves: CVE-2026-25592 Source advisory: OSV:GHSA-2WW3-72RP-WPP4...

agixt (1.3.71) potentially affected by CVE-2026-25592 via semantic-kernel (0.3.7.dev0)

semantic-kernel PYPI version 0.3.7.dev0 is affected by a known vulnerability. The following packages have a transitive dependency on semantic-kernel and may be impacted: - agixt 1.3.71 Source cves: CVE-2026-25592 Source advisory: OSV:GHSA-2WW3-72RP-WPP4...

sonagent (>=1.0.0, <=1.0.9) potentially affected by CVE-2026-25592 via semantic-kernel (0.4.5.dev0)

semantic-kernel PYPI version 0.4.5.dev0 is affected by a known vulnerability. The following packages have a transitive dependency on semantic-kernel and may be impacted: - sonagent =1.0.0, =1.0.9 Source cves: CVE-2026-25592 Source advisory: OSV:GHSA-2WW3-72RP-WPP4...

gptui (0.1.0) potentially affected by CVE-2026-25592 via semantic-kernel (0.3.15.dev0)

semantic-kernel PYPI version 0.3.15.dev0 is affected by a known vulnerability. The following packages have a transitive dependency on semantic-kernel and may be impacted: - gptui 0.1.0 Source cves: CVE-2026-25592 Source advisory: OSV:GHSA-2WW3-72RP-WPP4...