CVE-2026-26030
Microsoft Semantic Kernel InMemoryVectorStore filter functionality vulnerable to remote code execution
Semantic Kernel, Microsoft's semantic kernel Python SDK, has a remote code execution vulnerability in versions prior to 1.39.4, specifically within the InMemoryVectorStore filter functionality. The problem has been fixed in version python-1.39.4. Users should upgrade this version or higher. As a workaround, avoid using InMemoryVectorStore for production scenarios.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
Microsoft Semantic Kernel InMemoryVectorStore filter functionality vulnerable to remote code execution
Semantic Kernel, Microsoft's semantic kernel Python SDK, has a remote code execution vulnerability in versions prior to 1.39.4, specifically within the InMemoryVectorStore filter functionality. The problem has been fixed in version python-1.39.4. Users should upgrade this version or higher. As a workaround, avoid using InMemoryVectorStore for production scenarios.
- Record
CVE-2026-26030- CVSS 3.1
- 10.0 Critical
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H - Weakness
- CWE-94
- Updated
- 2026-11-02
EUVDEUVD-2026-8014
Semantic Kernel, Microsoft's semantic kernel Python SDK, has a remote code execution vulnerability in versions prior to 1.39.4, specifically within the InMemoryVectorStore filter functionality. The problem has been fixed in version python-1.39.4. Users should upgrade this version or higher. As a workaround, avoid using InMemoryVectorStore for production scenarios.
- Record
EUVD-2026-8014- CVSS 3.1
- 10.0 Critical
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-xjw9-4gw8-4rqx
Microsoft Semantic Kernel InMemoryVectorStore filter functionality vulnerable to remote code execution
Impact:
An RCE vulnerability has been identified in Microsoft Semantic Kernel Python SDK, specifically within the InMemoryVectorStore filter functionality.
Patches:
The problem has been fixed in python-1.39.4. Users should upgrade this version or higher.
Workarounds:
Avoid using InMemoryVectorStore for production scenarios.
References:
Release python-1.39.4 · microsoft/semantic-kernel · GitHub PR to block use of dangerous attribute names that must not be accessed in filter expressions
- Record
GHSA-xjw9-4gw8-4rqx- CVSS 3.1
- 9.9 Critical
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H - Weakness
- CWE-94
- Updated
- 2026-11-02
NVD
Semantic Kernel, Microsoft's semantic kernel Python SDK, has a remote code execution vulnerability in versions prior to 1.39.4, specifically within the InMemoryVectorStore filter functionality. The problem has been fixed in version python-1.39.4. Users should upgrade this version or higher. As a workaround, avoid using InMemoryVectorStore for production scenarios.
- Record
CVE-2026-26030- CVSS 3.1
- 9.9 Critical
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H - Weakness
- CWE-94
- Updated
- 2026-11-02
OSV
Microsoft Semantic Kernel InMemoryVectorStore filter functionality vulnerable to remote code execution
Semantic Kernel, Microsoft's semantic kernel Python SDK, has a remote code execution vulnerability in versions prior to 1.39.4, specifically within the InMemoryVectorStore filter functionality. The problem has been fixed in version python-1.39.4. Users should upgrade this version or higher. As a workaround, avoid using InMemoryVectorStore for production scenarios.
- Record
CVE-2026-26030- CVSS 3.1
- 9.9 Critical
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H - Weakness
- CWE-94
- Updated
- 2026-11-02
OSVGHSA-xjw9-4gw8-4rqx
Microsoft Semantic Kernel InMemoryVectorStore filter functionality vulnerable to remote code execution
Impact:
An RCE vulnerability has been identified in Microsoft Semantic Kernel Python SDK, specifically within the InMemoryVectorStore filter functionality.
Patches:
The problem has been fixed in python-1.39.4. Users should upgrade this version or higher.
Workarounds:
Avoid using InMemoryVectorStore for production scenarios.
References:
Release python-1.39.4 · microsoft/semantic-kernel · GitHub PR to block use of dangerous attribute names that must not be accessed in filter expressions
- Record
GHSA-xjw9-4gw8-4rqx- CVSS 3.1
- 9.9 Critical
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H - Weakness
- CWE-94
- Updated
- 2026-11-02
OSVPYSEC-2026-163
Semantic Kernel, Microsoft's semantic kernel Python SDK, has a remote code execution vulnerability in versions prior to 1.39.4, specifically within the InMemoryVectorStore filter functionality. The problem has been fixed in version python-1.39.4. Users should upgrade this version or higher. As a workaround, avoid using InMemoryVectorStore for production scenarios.
- Record
PYSEC-2026-163- CVSS 3.1
- 9.9 Critical
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
semantic-kernelPyPI |
before 1.39.4 | 1.39.4 |
semantic-kernelPyPI |
before 1.39.4, plus listed versions 0.0.1.dev00.1.0.dev00.2.0.dev00.2.1.dev00.2.2.dev0 Show 45 moreShow less0.2.3.dev00.2.4.dev00.2.5.dev00.2.6.dev00.2.7.dev00.2.8.dev00.2.9.dev00.3.0.dev00.3.1.dev00.3.10.dev00.3.11.dev00.3.12.dev00.3.13.dev00.3.14.dev00.3.15.dev00.3.2.dev00.3.3.dev00.3.4.dev00.3.5.dev00.3.6.dev00.3.7.dev00.3.8.dev00.3.9.dev00.4.0.dev00.4.1.dev00.4.2.dev00.4.3.dev00.4.4.dev00.4.5.dev00.4.6.dev00.4.7.dev00.5.0.dev00.5.1.dev00.9.0b10.9.1b10.9.2b10.9.3b10.9.4b10.9.5b10.9.6b10.9.7b10.9.8b10.9.9b11.0.01.0.0rc1 |
1.39.4 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| PoC in GitHub | InertFluid/sk-cve-2026-26030-lab | 2026-06-22 |
| PoC in GitHub | mbanyamer/CVE-2026-26030-Microsoft-Semantic-Kernel-1.39.4-RCE | 2026-02-24 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV, PoC in GitHub |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2026-26030 is a critical vulnerability (CVSS 10.0) in Microsoft Semantic Kernel, published February 19, 2026. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 3.91%, the 90th percentile. Fixed in semantic-kernel 1.39.4.
References
github.com/microsoft/semantic-kernel/security/advisories/GHSA-xjw9-4gw8-4rqx
nvd.nist.gov/vuln/detail/CVE-2026-26030
Left out here: 76 versions. The JSON record has them.