CVE-2026-26030 Microsoft Semantic Kernel InMemoryVectorStore filter functionality vulnerable to remote code execution
- Exploited in the wild
- Not known
- Fix
- Available
What is CVE-2026-26030?
CVE-2026-26030 is a critical vulnerability in microsoft semantic-kernel, published on 19 Feb 2026.
Official description
Semantic Kernel, Microsoft's semantic kernel Python SDK, has a remote code execution vulnerability in versions prior to 1.39.4, specifically within the `InMemoryVectorStore` filter functionality. The problem has been fixed in version `python-1.39.4`. Users should upgrade this version or higher. As a workaround, avoid using `InMemoryVectorStore` for production scenarios.
Weakness: CWE-94
Which versions are affected by CVE-2026-26030?
3 open source packages ship an affected version, including semantic-kernel. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
semantic-kernel PyPI | All versions | 1.39.4 |
semantic-kernel PyPI | All versions | 1.39.4 |
semantic-kernel PyPI | All versions | 1.39.4 |
Products include Microsoft Semantic Kernel.
How do I fix CVE-2026-26030?
Upgrade semantic-kernel to 1.39.4 or later.
Is CVE-2026-26030 being exploited?
There is no known exploitation of CVE-2026-26030 in the wild and no public exploit code.
Public exploit code: 2 proofs of concept on GitHub.
Sources
Also known as GHSA-xjw9-4gw8-4rqx, PYSEC-2026-163.