Skip to content

Semantic Kernel security advisories

2 advisories · 2 critical or high in 12 months · latest Feb 19

2 advisories

DateAdvisory
Feb 19Microsoft Semantic Kernel InMemoryVectorStore filter functionality vulnerable to remote code execution
CVE-2026-26030Critical9.9fixed in 1.39.4
Feb 6Semantic Kernel has Arbitrary File Write via AI Agent Function Calling in .NET SDK
CVE-2026-25592Critical9.9fixed in 1.39.3
About Semantic Kernel

The SDK for AI agents and plugins.

Packages watched: semantic-kernel (PyPI).

Microsoft elsewhere on fru.dev: Acquisitions · Quarterly · Paydays · Releases · Repos · TechConf · Trending

Critical advisories by email

Wednesdays: the week’s critical and high advisories in the AI and data stack, with the fixed versions. Only in weeks that have some.

Double opt-in. Unsubscribe any time.