CVE-2026-25592

CRITICAL

Semantic Kernel is an SDK used to build, orchestrate, and deploy AI agents and multi-agent systems. Prior to 1.71.0, an Arbitrary File Write vulnerability has been identified in Microsoft's Semanti...

Affects 0 products across 2 vendors.

CVSS 3.19.9
EPSS2.4%
Percentile83th
PatchUnknown
CVSS Vector — Plain English Remotely exploitable over the network, low complexity, low privileges required, no user interaction needed, can impact systems beyond the vulnerable component, full confidentiality impact, full integrity impact, full availability impact.
CWE Weakness Definitions
CWE-22: Path Traversal

Attacker manipulates file path inputs to access files outside the intended directory.

Related Attack Patterns (CAPEC)
CAPEC-64 Using Slashes and URL Encoding Combined to Bypass Validation Logic
via CWE-22
CAPEC-76 Manipulating Web Input to File System Calls
via CWE-22
CAPEC-78 Using Escaped Slashes in Alternate Encoding
via CWE-22
CAPEC-79 Using Slashes in Alternate Encoding
via CWE-22
CAPEC-126 Path Traversal
via CWE-22

Mapping is CWE-to-CAPEC per MITRE CAPEC 3.9.

◆ AI Analysis — automated analysis, not human-reviewed

An Arbitrary File Write vulnerability exists in Microsoft's Semantic Kernel .NET SDK prior to version 1.71.0, specifically within the SessionsPythonPlugin component. This vulnerability could allow an attacker to write arbitrary files to the system, potentially leading to unauthorized code execution or data corruption.

BSID: BS-2026-GLOBAL-074235-C • Model: /workspace/models/qwen2.5-coder-32b-instruct-bf16 • Confidence: HIGH

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →
Frequently Asked Questions
What is CVE-2026-25592?
An Arbitrary File Write vulnerability exists in Microsoft's Semantic Kernel .NET SDK prior to version 1.71.0, specifically within the SessionsPythonPlugin component. This vulnerability could allow an attacker to write arbitrary files to the system, potentially leading to unauthorized code execution or data corruption.
What is the CVSS score for CVE-2026-25592?
CVE-2026-25592 has CVSS 9.9 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H. EPSS: 2.4%.
Is CVE-2026-25592 actively exploited?
No confirmed active exploitation of CVE-2026-25592 as of 2026-09-25.
How do I remediate CVE-2026-25592?
Priority: IMMEDIATE.
What systems are affected by CVE-2026-25592?
CVE-2026-25592 affects Kernel; Microsoft.
Vulnerability Details
CVE IDCVE-2026-25592
BSIDBS-2026-GLOBAL-074235-C BreachSpider Global ID
CVSS VectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Published2026-02-06
Last Modified2026-06-17
ICS Relevance15%
Weakness (CWE)
Path Traversal
SourceNVD
Official Description

Semantic Kernel is an SDK used to build, orchestrate, and deploy AI agents and multi-agent systems. Prior to 1.71.0, an Arbitrary File Write vulnerability has been identified in Microsoft's Semantic Kernel .NET SDK, specifically within the SessionsPythonPlugin. The problem has been fixed in Microsoft.SemanticKernel.Core version 1.71.0. As a mitigation, users can create a Function Invocation Filter which checks the arguments being passed to any calls to DownloadFileAsync  or UploadFileAsync and ensures the provided localFilePath is allow listed.

Source: NIST NVD / MITRE CVE Database

Attack Vector Analysis — CITED Relevance

The vulnerability arises from improper validation of file paths when writing files in the SessionsPythonPlugin. An attacker could exploit this by providing a malicious file path, leading to arbitrary file writes on the system.

Exploitation Likelihood: HIGH

Affected Products
VendorProductAffected Versions
Kernel — —
Microsoft — —
Remediation

No official vendor advisory link on record. See the CVE record →

Threat Intelligence
● Threat Intelligence Validated: October 2026 | Threat Age: 251 Days
CISA known-exploitedNot in KEV catalog
Public ExploitNot confirmed
PoC CodeNot confirmed
AI Enrichment Record — provenance & audit hash
Model/workspace/models/qwen2.5-coder-32b-instruct-bf16
ConfidenceHIGH
Enriched At2026-05-24
SHA-512 Audit Hashe4867c277527566618786410fd117b2589da61b3514dc60ba4d963ca21a9845d807ab31f5e8ce44e1760020e6c2b79b4c195ffd308a30c34bf60f82b6913b28f
Related CVEs affecting Kernel
CVE-2023-53867 9.8 In the Linux kernel, the following vulnerability has been resolved: ceph: fi... CVE-2025-40212 9.8 In the Linux kernel, the following vulnerability has been resolved: nfsd: fi... CVE-2025-68745 9.8 In the Linux kernel, the following vulnerability has been resolved: scsi: ql... CVE-2025-68726 9.8 In the Linux kernel, the following vulnerability has been resolved: crypto: ... CVE-2026-43384 9.8 In the Linux kernel, the following vulnerability has been resolved: net/tcp-...
View all Kernel CVEs →

Critical Severity - Know Your Exposure

A CVSS 9.9 vulnerability in your ICS environment cannot wait. BreachSpider maps critical CVEs to your specific assets and tells you what to fix first.

Create a free account →