CVE-2026-25592 | Microsoft Semantic Kernel - .NET SDK Operational Intel

Executive Risk Summary

"An Arbitrary File Write vulnerability has been identified in Microsoft's Semantic Kernel .NET SDK, specifically within the SessionsPythonPlugin, which could allow an attacker to write files to arbitrary locations on the system. The issue has been fixed in Microsoft.SemanticKernel.Core version 1.71.0, and users can create a Function Invocation Filter as a mitigation."

Operational Audit Arsenal

Target Type DLL

Target Asset Microsoft.SemanticKernel.Core

Standard Path %windir%\Microsoft.NET\assembly\GAC_MSIL\Microsoft.SemanticKernel.Core

PowerShell

# 🛠️ Senior Engineer Universal Audit
# Target: Microsoft.SemanticKernel.Core (DLL)
$Targets = 'Microsoft.SemanticKernel.Core'
$SearchPaths = @("$env:windir\System32", "$env:ProgramFiles", "${env:ProgramFiles(x86)}")

Get-ChildItem -Path $SearchPaths -Include $Targets -Recurse -ErrorAction SilentlyContinue | 
Select-Object FullName, @{Name="Version";Expression={$_.VersionInfo.ProductVersion}}