Description
Semantic Kernel, Microsoft's semantic kernel Python SDK, has a remote code execution vulnerability in versions prior to 1.39.4, specifically within the `InMemoryVectorStore` filter functionality. The problem has been fixed in version `python-1.39.4`. Users should upgrade this version or higher. As a workaround, avoid using `InMemoryVectorStore` for production scenarios.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| microsoft | semantic-kernel | < 1.39.4 | — |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
GitHub 2 repositories
-
InertFluid/sk-cve-2026-26030-lab ★ 1 · Jun 22, 2026
Ethical, network-isolated Docker lab reproducing CVE-2026-26030 — Semantic Kernel in-memory vector store filter eval() RCE (patched in 1.39.4)
-
mbanyamer/CVE-2026-26030-Microsoft-Semantic-Kernel-1.39.4-RCE ★ 1 · Feb 24, 2026
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | semantic-kernel | < 1.39.4 | 1.39.4 | GHSA-xjw9-4gw8-4rqx |