PT-2026-6792 · Semantic Kernel+1 · Sessionspythonplugin+1

Amiteliahu + 2 · Published 2026-02-06 · Updated 2026-05-06 · CVE-2026-25592

Positive Technologies (AI Summary)

CVSS v3.1

9.9

Critical

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Microsoft Semantic Kernel versions prior to 1.71.0

Description Semantic Kernel is an SDK used to build, orchestrate, and deploy AI agents and multi-agent systems. A critical Arbitrary File Write issue exists within the SessionsPythonPlugin. This allows for potential remote path traversal and arbitrary file writes. The issue is due to unchecked paths when handling file operations. The vulnerability affects developers who have built applications using the Microsoft Semantic Kernel .NET SDK and the SessionsPythonPlugin. The DownloadFileAsync and UploadFileAsync functions are specifically implicated, with the localFilePath variable being a key point of concern.

Recommendations Versions prior to 1.71.0 should be updated to version 1.71.0 or later. As a mitigation, create a Function Invocation Filter to validate arguments passed to DownloadFileAsync and UploadFileAsync, ensuring the localFilePath is allow listed.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2026-25592

GHSA-2WW3-72RP-WPP4

Affected Products

Semantic-Kernel

Sessionspythonplugin

References · 25

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/25xxx/CVE-2026-25592.json · Exploit
• https://osv.dev/vulnerability/CVE-2026-25592 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-25592 · Security Note
• https://osv.dev/vulnerability/GHSA-2ww3-72rp-wpp4 · Vendor Advisory
• https://github.com/microsoft/semantic-kernel · Note
• https://github.com/microsoft/semantic-kernel/pull/13478/changes#diff-88d3cacba2bfa84eef8f2aa171b34f9940338cbb784a3ffc49f5fe3af1b8943d · Note
• https://github.com/microsoft/semantic-kernel/blob/main/dotnet/samples/Demos/CodeInterpreterPlugin/Program.cs#L61-L64 · Note
• https://github.com/microsoft/semantic-kernel/security/advisories/GHSA-2ww3-72rp-wpp4 · Note
• https://t.me/poxek/5911 · Telegram Post
• https://twitter.com/0dayPublishing/status/2019877899034038735 · Twitter Post
• https://reddit.com/r/SecOpsDaily/comments/1syxs18/critical_vulnerability_alert_microsoft_semantic · Reddit Post
• https://twitter.com/ptdbugs/status/2052073090364874830 · Twitter Post
• https://twitter.com/vuln_tracker/status/2021545985357533577 · Twitter Post
• https://reddit.com/r/VulnMatter/comments/1r03op1/resumen_diario_de_vulnerabilidades_09022026 · Reddit Post
• https://t.me/cveNotify/152451 · Telegram Post