{"data":{"id":"5f207c75-68f7-4f77-bb48-91fec2adcf78","title":"CVE-2026-25592: Semantic Kernel is an SDK used to build, orchestrate, and deploy AI agents and multi-agent systems. Prior to 1.70.0, an…","summary":"Semantic Kernel's .NET SDK, prior to 1.70.0, contains an Arbitrary File Write vulnerability in the SessionsPythonPlugin. The flaw is fixed in Microsoft.SemanticKernel.Core 1.70.0.","solution":"Fixed in Microsoft.SemanticKernel.Core 1.70.0. As a mitigation, create a Function Invocation Filter that checks the arguments passed to DownloadFileAsync or UploadFileAsync and ensures the provided localFilePath is allow listed.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-25592","publishedAt":"2026-02-07T02:16:17.647Z","cveId":"CVE-2026-25592","cweIds":["CWE-22"],"cvssScore":"9.9","cvssSeverity":"critical","severity":"critical","attackType":["other"],"issueType":"vulnerability","affectedPackages":["semantic-kernel@< 1.39.3 (fixed: 1.39.3)","Microsoft.SemanticKernel.Core@< 1.71.0 (fixed: 1.71.0)"],"affectedPackageNames":["semantic-kernel","microsoft-semantickernel-core"],"affectedPackageRefs":["pypi:semantic-kernel","nuget:microsoft-semantickernel-core"],"affectedVendors":["Microsoft"],"affectedVendorsRaw":["Semantic Kernel","Microsoft.SemanticKernel.Core","SessionsPythonPlugin"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Semantic Kernel .NET SDK arbitrary file write in SessionsPythonPlugin","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.02521,"epssCheckedAt":"2026-11-04T06:10:15.563Z","kevDateAdded":null,"advisoryAliases":["GHSA-2ww3-72rp-wpp4"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:50:58.536Z","patchAvailable":true,"disclosureDate":null,"fixReleasedAt":"2026-02-02T01:32:40.525Z","daysToFix":-5,"fixCheckedAt":"2026-10-29T21:41:43.121Z","capecIds":["CAPEC-126"],"crossRefCount":1,"attackSophistication":"moderate","impactType":["integrity","availability"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":null,"name":"Microsoft.SemanticKernel.Core","fixedVersion":"1.71.0","matchedVersion":null,"fixReleasedAt":null,"daysToFix":null,"match":null,"source":null,"status":"ecosystem_unknown","checkedAt":"2026-10-29T21:41:42.972Z"},{"ecosystem":"pypi","name":"semantic-kernel","fixedVersion":"1.39.3","matchedVersion":"1.39.3","fixReleasedAt":"2026-02-02T01:32:40.525Z","daysToFix":-5,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:41:42.972Z"}]}}