CVE-2026-26030: Microsoft Semantic Kernel InMemoryVectorStore filter functionality vulnerable to remote code execution
Impact: An RCE vulnerability has been identified in Microsoft Semantic Kernel Python SDK, specifically within the InMemoryVectorStore filter functionality.
Patches: The problem has been fixed in python-1.39.4. Users should upgrade this version or higher.
Workarounds: Avoid using InMemoryVectorStore for production scenarios.
References: Release python-1.39.4 · microsoft/semantic-kernel · GitHub PR to block use of dangerous attribute names that must not be accessed in filter expressions
Other sources
CVE-2026-26030 is a Remote Code Execution vulnerability that has been identified in Microsoft Semantic Kernel Python SDK, specifically within the InMemoryVectorStore filter functionality. GitHub created this CVE on their behalf. GitHub created this CVE on their behalf. This document incorporates updates in the Microsoft Semantic Kernel Repository which address this vulnerability. Please see CVE-2026-26030 for more information.
— Microsoft
GitHub: CVE-2026-26030 Microsoft Semantic Kernel InMemoryVectorStore filter functionality vulnerable
— Microsoft
Semantic Kernel, Microsoft's semantic kernel Python SDK, has a remote code execution vulnerability in versions prior to 1.39.4, specifically within the InMemoryVectorStore filter functionality. The problem has been fixed in version python-1.39.4. Users should upgrade this version or higher. As a workaround, avoid using InMemoryVectorStore for production scenarios.
— NVD
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2026-26030?
CVE-2026-26030 has been classified as a critical remote code execution vulnerability.
How do I fix CVE-2026-26030?
To fix CVE-2026-26030, upgrade to Microsoft Semantic Kernel version 1.39.4 or higher.
Which versions are affected by CVE-2026-26030?
Versions of Microsoft Semantic Kernel prior to 1.39.4 are affected by CVE-2026-26030.
What functionality is impacted in CVE-2026-26030?
The remote code execution vulnerability in CVE-2026-26030 specifically affects the 'InMemoryVectorStore' filter functionality.
Is CVE-2026-26030 specific to a particular programming language or SDK?
CVE-2026-26030 is specifically related to the Python SDK of Microsoft's Semantic Kernel.