Skip to content
Patch Next
Sign inAdd to your agent

← Public intelligence

NuGet package

microsoft.semantickernel.core

Open actionable advisories and recorded vendor fixes. This public package view has no inventory attached and cannot establish whether your deployment is affected. A vendor fix never resolves your finding; verify your installed version and the source guidance.

Open advisories

1 actionable advisory, newest first. Withdrawn advisories and news are excluded. Coverage is partial.

  1. Critical, CVSS 9.9NuGetAmendedPublished

    Semantic Kernel has Arbitrary File Write via AI Agent Function Calling in .NET SDK

    CVE-2026-25592 · GHSA-2ww3-72rp-wpp4

    Affected
    • NuGet microsoft.semantickernel.core < 1.71.0
    Fixed in
    1.71.0· Vendor fix available
    Issue
    Impact What kind of vulnerability is it? Who is impacted? An Arbitrary File Write vulnerability has been identified in Microsoft's Semantic Kernel .NET SDK, specifically within the SessionsPythonPlugin. Developers who have built applications which include Microsoft's Semantic Kernel .NET SDK and are using the SessionsPythonPlugin Patches Has the problem been patched? What versions should users upgrade to? The problem has been fixed in Microsoft.SemanticKernel.Plugins.Core version 1.71.0. Users should upgrade to version 1.71.0 or higher. Workarounds Is there a way for users to fix or remediate the vulnerability without upgrading? Users can create a Function Invocation Filter which checks the arguments being passed to any calls to DownloadFileAsync or UploadFileAsync and ensures the provided localFilePath is allow listed. References Are there any links users can visit to find out more? - Sample showing safe use of the CodeInterpreterPlugin - PR to Add file upload security controls to…

    Recommended action: Upgrade to 1.71.0 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.

    Sources:github.com (1)osv.dev (2)Source checked Evidence →