criticalOther UnknownPublish anonymously
Microsoft Semantic Kernel RCE (CVE-2026-26030)
by Publish anonymously · 2 days agoviews 1en
PII protected
Personal information such as emails, phone numbers, IDs and access tokens are automatically masked before publication.
CVSS 9.9. Critical RCE in Microsoft Semantic Kernel Python SDK's InMemoryVectorStore filter functionality. Attackers execute arbitrary code through crafted filter expressions. Semantic Kernel powers many Microsoft Copilot integrations and RAG-based AI applications. Fixed in python-1.39.4.