10.0 CriticalCWE-22
CVE-2026-25592
Semantic Kernel has an Arbitrary File Write via AI Agent Function Calling in .NET SDK
microsoftsemantic-kernel
Status
- Not in CISA KEV
Exploit probabilityEPSSchecked 25 Oct
2.6%probability of exploitation in the next 30 days
Higher than 85% of scored CVEs
SeverityCVSS
10.0Critical
Description NVD
Semantic Kernel is an SDK used to build, orchestrate, and deploy AI agents and multi-agent systems. Prior to 1.71.0, an Arbitrary File Write vulnerability has been identified in Microsoft's Semantic Kernel .NET SDK, specifically within the SessionsPythonPlugin. The problem has been fixed in Microsoft.SemanticKernel.Core version 1.71.0. As a mitigation, users can create a Function Invocation Filter which checks the arguments being passed to any calls to DownloadFileAsync or UploadFileAsync and ensures the provided localFilePath is allow listed.
Coverage 2 articles · 2 outlets
See the full timelineShow as table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| Tue 10 Feb · 01:00 UTC | SecurityOnline | CVE-2026-25592: Critical Semantic Kernel Flaw (CVSS 10.0) Allows File Overwrite |
| Thu 7 May · 21:31 UTC | Microsoft | When prompts become shells: RCE vulnerabilities in AI agent frameworks |
- When prompts become shells: RCE vulnerabilities in AI agent frameworksMicrosoft · mentions it in passing
- CVE-2026-25592: Critical Semantic Kernel Flaw (CVSS 10.0) Allows File OverwriteSecurityOnline · first in our coverage