CVE-2026-26030

CRITICAL

Microsoft Semantic Kernel <1.39.4 - RCE

Title source: llm

Description

Semantic Kernel, Microsoft's semantic kernel Python SDK, has a remote code execution vulnerability in versions prior to 1.39.4, specifically within the `InMemoryVectorStore` filter functionality. The problem has been fixed in version `python-1.39.4`. Users should upgrade this version or higher. As a workaround, avoid using `InMemoryVectorStore` for production scenarios.

Exploits (2)

github WORKING POC 10 stars

by XiaomingX · pythonpoc

https://github.com/XiaomingX/data-cve-poc-py-v1/tree/main/2026/CVE-2026-26030

View Code ZIP pw:eip

nomisec WORKING POC

by mbanyamer · poc

https://github.com/mbanyamer/CVE-2026-26030-Microsoft-Semantic-Kernel-1.39.4-RCE

View Code ZIP pw:eip

References (3)

[Issue Tracking] https://github.com/microsoft/semantic-kernel/pull/13505

[Vendor Advisory] https://github.com/microsoft/semantic-kernel/security/advisories/GHSA-xjw9-4gw8-4rqx

[Release Notes] https://github.com/microsoft/semantic-kernel/releases/tag/python-1.39.4

Scores

CVSS v3 9.9

EPSS 0.0009

EPSS Percentile 25.2%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Details

CWE

CWE-94

Status published

Products (1)

microsoft/semantic_kernel < 1.39.4

Published Feb 19, 2026

Tracked Since Feb 19, 2026