semantic-kernel vulnerabilities

2 known vulnerabilities in semantic-kernel from Microsoft. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.9 Critical severity

  semantic-kernel: Improper Control of Generation of Code

  CVE-2026-26030Feb 19, 2026MicrosoftEPSS 3.91%

  Semantic Kernel, Microsoft's semantic kernel Python SDK, has a remote code execution vulnerability in versions prior to 1.39.4, specifically within the `InMemoryVectorStore` filter functionality. The problem has been fixed in version `python-1.39.4`. Users sho

• 9.9 Critical severity

  semantic-kernel: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2026-25592Feb 6, 2026MicrosoftEPSS 2.52%

  Semantic Kernel is an SDK used to build, orchestrate, and deploy AI agents and multi-agent systems. Prior to 1.71.0, an Arbitrary File Write vulnerability has been identified in Microsoft's Semantic Kernel .NET SDK, specifically within the SessionsPythonPlugin