GHSA-xjw9-4gw8-4rqx
Microsoft Semantic Kernel InMemoryVectorStore filter functionality vulnerable to remote code execution
At a glance
- Published
- Updated
- CVE
- CVE-2026-26030
- Aliases
- PYSEC-2026-163
- CVSS_V3
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Description
### Impact: An RCE vulnerability has been identified in Microsoft Semantic Kernel Python SDK, specifically within the `InMemoryVectorStore` filter functionality. ### Patches: The problem has been fixed in [python-1.39.4](https://github.com/microsoft/semantic-kernel/releases/tag/python-1.39.4). Users should upgrade this version or higher. ### Workarounds: Avoid using `InMemoryVectorStore` for production scenarios. ### References: [Release python-1.39.4 · microsoft/semantic-kernel · GitHub](https://github.com/microsoft/semantic-kernel/releases/tag/python-1.39.4) [PR to block use of dangerous attribute names that must not be accessed in filter expressions](https://github.com/microsoft/semantic-kernel/pull/13505)
Affected packages
| Package | Versions |
|---|---|
| PyPI · semantic-kernel | introduced 0, fixed 1.39.4 |
References
- https://github.com/microsoft/semantic-kernel/security/advisories/GHSA-xjw9-4gw8-4rqx WEB
- https://nvd.nist.gov/vuln/detail/CVE-2026-26030 ADVISORY
- https://github.com/microsoft/semantic-kernel/pull/13505 WEB
- https://github.com/microsoft/semantic-kernel PACKAGE
- https://github.com/microsoft/semantic-kernel/releases/tag/python-1.39.4 WEB
- https://github.com/pypa/advisory-database/tree/main/vulns/semantic-kernel/PYSEC-2026-163.yaml WEB
Sources
| Source | Licence |
|---|---|
| OSV.dev | CC-BY 4.0 — GitHub Advisory Database |