{"action":"Upgrade semantic-kernel to 1.39.3 or later.","affected":[{"fixed":"1.39.3","introduced":"0"}],"component":"semantic-kernel","cve_ids":["CVE-2026-25592"],"ecosystem":"PyPI","epss":0.02521,"exploited":false,"fixed_versions":["1.39.3"],"ghsa_id":"GHSA-2ww3-72rp-wpp4","id":"tcs_01M5KHBYYQX50HKDG6H1RKCMJ5","modified_at":"2026-07-01T20:23:04.850413Z","published_at":"2026-06-29T11:50:51.513729Z","references":["https://osv.dev/vulnerability/PYSEC-2026-531","https://github.com/microsoft/semantic-kernel/security/advisories/GHSA-2ww3-72rp-wpp4","https://nvd.nist.gov/vuln/detail/CVE-2026-25592","https://github.com/microsoft/semantic-kernel/pull/13478/changes#diff-88d3cacba2bfa84eef8f2aa171b34f9940338cbb784a3ffc49f5fe3af1b8943d","https://github.com/microsoft/semantic-kernel","https://github.com/microsoft/semantic-kernel/blob/main/dotnet/samples/Demos/CodeInterpreterPlugin/Program.cs#L61-L64","https://pypi.org/project/semantic-kernel","https://github.com/advisories/GHSA-2ww3-72rp-wpp4"],"severity":{"label":"critical","score":9.9},"sources":[{"source":"osv","source_id":"PYSEC-2026-531","url":"https://osv.dev/vulnerability/PYSEC-2026-531"}],"summary":"Semantic Kernel has Arbitrary File Write via AI Agent Function Calling in .NET SDK"}