{
  "credits": [
    {
      "type": "finder",
      "user": {
        "avatar_url": "https://avatars.githubusercontent.com/u/257952426?v=4",
        "events_url": "https://api.github.com/users/amiteliahu/events{/privacy}",
        "followers_url": "https://api.github.com/users/amiteliahu/followers",
        "following_url": "https://api.github.com/users/amiteliahu/following{/other_user}",
        "gists_url": "https://api.github.com/users/amiteliahu/gists{/gist_id}",
        "gravatar_id": "",
        "html_url": "https://github.com/amiteliahu",
        "id": 257952426,
        "login": "amiteliahu",
        "node_id": "U_kgDOD2AKqg",
        "organizations_url": "https://api.github.com/users/amiteliahu/orgs",
        "received_events_url": "https://api.github.com/users/amiteliahu/received_events",
        "repos_url": "https://api.github.com/users/amiteliahu/repos",
        "site_admin": false,
        "starred_url": "https://api.github.com/users/amiteliahu/starred{/owner}{/repo}",
        "subscriptions_url": "https://api.github.com/users/amiteliahu/subscriptions",
        "type": "User",
        "url": "https://api.github.com/users/amiteliahu",
        "user_view_type": "public"
      }
    },
    {
      "type": "finder",
      "user": {
        "avatar_url": "https://avatars.githubusercontent.com/u/69523016?v=4",
        "events_url": "https://api.github.com/users/doredry/events{/privacy}",
        "followers_url": "https://api.github.com/users/doredry/followers",
        "following_url": "https://api.github.com/users/doredry/following{/other_user}",
        "gists_url": "https://api.github.com/users/doredry/gists{/gist_id}",
        "gravatar_id": "",
        "html_url": "https://github.com/doredry",
        "id": 69523016,
        "login": "doredry",
        "node_id": "MDQ6VXNlcjY5NTIzMDE2",
        "organizations_url": "https://api.github.com/users/doredry/orgs",
        "received_events_url": "https://api.github.com/users/doredry/received_events",
        "repos_url": "https://api.github.com/users/doredry/repos",
        "site_admin": false,
        "starred_url": "https://api.github.com/users/doredry/starred{/owner}{/repo}",
        "subscriptions_url": "https://api.github.com/users/doredry/subscriptions",
        "type": "User",
        "url": "https://api.github.com/users/doredry",
        "user_view_type": "public"
      }
    },
    {
      "type": "finder",
      "user": {
        "avatar_url": "https://avatars.githubusercontent.com/u/144804966?v=4",
        "events_url": "https://api.github.com/users/urioren/events{/privacy}",
        "followers_url": "https://api.github.com/users/urioren/followers",
        "following_url": "https://api.github.com/users/urioren/following{/other_user}",
        "gists_url": "https://api.github.com/users/urioren/gists{/gist_id}",
        "gravatar_id": "",
        "html_url": "https://github.com/urioren",
        "id": 144804966,
        "login": "urioren",
        "node_id": "U_kgDOCKGMZg",
        "organizations_url": "https://api.github.com/users/urioren/orgs",
        "received_events_url": "https://api.github.com/users/urioren/received_events",
        "repos_url": "https://api.github.com/users/urioren/repos",
        "site_admin": false,
        "starred_url": "https://api.github.com/users/urioren/starred{/owner}{/repo}",
        "subscriptions_url": "https://api.github.com/users/urioren/subscriptions",
        "type": "User",
        "url": "https://api.github.com/users/urioren",
        "user_view_type": "public"
      }
    }
  ],
  "cve_id": "CVE-2026-26030",
  "cvss": {
    "score": 10.0,
    "vector_string": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H"
  },
  "cvss_severities": {
    "cvss_v3": {
      "score": 10.0,
      "vector_string": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H"
    },
    "cvss_v4": {
      "score": 0.0,
      "vector_string": null
    }
  },
  "cwes": [
    {
      "cwe_id": "CWE-94",
      "name": "Improper Control of Generation of Code ('Code Injection')"
    }
  ],
  "description": "### Impact:\nAn RCE vulnerability has been identified in Microsoft Semantic Kernel Python SDK, specifically within the `InMemoryVectorStore` filter functionality.\n\n### Patches:\nThe problem has been fixed in [python-1.39.4](https://github.com/microsoft/semantic-kernel/releases/tag/python-1.39.4). Users should upgrade this version or higher.\n\n### Workarounds:\nAvoid using `InMemoryVectorStore` for production scenarios.\n\n### References:\n[Release python-1.39.4 · microsoft/semantic-kernel · GitHub](https://github.com/microsoft/semantic-kernel/releases/tag/python-1.39.4)\n[PR to block use of dangerous attribute names that must not be accessed in filter expressions](https://github.com/microsoft/semantic-kernel/pull/13505)",
  "ghsa_id": "GHSA-xjw9-4gw8-4rqx",
  "github_reviewed_at": "2026-02-19T19:34:14Z",
  "html_url": "https://github.com/advisories/GHSA-xjw9-4gw8-4rqx",
  "identifiers": [
    {
      "type": "GHSA",
      "value": "GHSA-xjw9-4gw8-4rqx"
    },
    {
      "type": "CVE",
      "value": "CVE-2026-26030"
    }
  ],
  "nvd_published_at": "2026-02-19T17:24:50Z",
  "published_at": "2026-02-19T19:34:14Z",
  "references": [
    "https://github.com/microsoft/semantic-kernel/security/advisories/GHSA-xjw9-4gw8-4rqx",
    "https://nvd.nist.gov/vuln/detail/CVE-2026-26030",
    "https://github.com/microsoft/semantic-kernel/pull/13505",
    "https://github.com/microsoft/semantic-kernel/releases/tag/python-1.39.4",
    "https://github.com/advisories/GHSA-xjw9-4gw8-4rqx"
  ],
  "repository_advisory_url": "https://api.github.com/repos/microsoft/semantic-kernel/security-advisories/GHSA-xjw9-4gw8-4rqx",
  "severity": "critical",
  "source_code_location": "https://github.com/microsoft/semantic-kernel",
  "summary": "Microsoft Semantic Kernel InMemoryVectorStore filter functionality vulnerable to remote code execution",
  "type": "reviewed",
  "updated_at": "2026-02-19T19:34:15Z",
  "url": "https://api.github.com/advisories/GHSA-xjw9-4gw8-4rqx",
  "vulnerabilities": [
    {
      "first_patched_version": "1.39.4",
      "package": {
        "ecosystem": "pip",
        "name": "semantic-kernel"
      },
      "vulnerable_functions": [],
      "vulnerable_version_range": "< 1.39.4"
    }
  ],
  "withdrawn_at": null
}