CVE-2026-26030 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Semantic Kernel, Microsoft's semantic kernel Python SDK, has a remote code execution vulnerability in versions prior to 1.39.4, specifically within the `InMemor…
Critical CVSS: 9.9

CVE-2026-26030

Semantic Kernel, Microsoft's semantic kernel Python SDK, has a remote code execution vulnerability in versions prior to 1.39.4, specifically within the `InMemoryVectorStore` filter functionality. The problem has been fixed in version `python-1.39.4`. Users should upgrade this version or higher. As a workaround, avoid using `InMemoryVectorStore` for production scenarios.
Vendor
Microsoft
Product
Semantic Kernel
CWE
CWE-94
Yayın Tarihi
2026-02-19 17:24:50
Güncelleme
2026-03-03 16:32:10
Source Identifier
security-advisories@github.com
KEV Date Added
-

Kategoriler

CWE-94 Semantic Kernel CRITICAL Microsoft 2026

Referanslar

https://github.com/microsoft/semantic-kernel/pull/13505 https://github.com/microsoft/semantic-kernel/releases/tag/python-1.39.4 https://github.com/microsoft/semantic-kernel/security/advisories/GHSA-xjw9-4gw8-4rqx