CriticalVulnerability
CVE-2026-25592: Semantic Kernel .NET SDK arbitrary file write in SessionsPythonPlugin
- Source
- NVD(opens in a new tab)
- Identifier
- CVE-2026-25592
- Published
- Record updated
- Affected
- semantic-kernel < 1.39.3, fixed in 1.39.3
- Microsoft.SemanticKernel.Core < 1.71.0, fixed in 1.71.0
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
- EPSS
- 2.4%
Summary
Semantic Kernel's .NET SDK, prior to 1.70.0, contains an Arbitrary File Write vulnerability in the SessionsPythonPlugin. The flaw is fixed in Microsoft.SemanticKernel.Core 1.70.0.
Mitigation
Fixed in Microsoft.SemanticKernel.Core 1.70.0. As a mitigation, create a Function Invocation Filter that checks the arguments passed to DownloadFileAsync or UploadFileAsync and ensures the provided localFilePath is allow listed.
Topics
Related items
- HighGHSA-h4xc-3qfq-jf93: Pydantic AI Web chat UI (`Agent.to_web()`, `clai web`): a website visited by the developer can trigger agent runs and server-side tool execution on the local chat endpointSame vendor · GitHub Advisory Database
- LowGHSA-6gw6-rv2g-25mg: Kiota: Unsafe oauth_card_path references in Kiota-generated API plugin manifestsSame vendor · GitHub Advisory Database
- MediumCVE-2026-89278: GPTranslate WordPress plugin exposes plaintext API key to unauthenticated usersSame vendor · NVD/CVE Database
- HighCVE-2026-85887: M365 Copilot incorrect permission assignment allows information disclosureSame vendor · NVD/CVE Database
- CriticalCVE-2026-85885: M365 Copilot command injection allows privilege elevation over a networkSame vendor · NVD/CVE Database