news
Two remote code execution flaws in a major agent framework
Microsoft patched remote code execution and arbitrary file write in Semantic Kernel. Upgrade, then go and look at your own tool parameters.
tools
What changed
Microsoft disclosed two vulnerabilities in Semantic Kernel, its own agent framework. CVE-2026-26030 allows remote code execution through unsafe string interpolation in default vector-store filters, which build lambda expressions out of user input. CVE-2026-25592 allows arbitrary file writes by chaining two model-exposed tools to escape a sandbox container. Fixes are in Python 1.39.4 and .NET 1.71.0.
Why you should care
Any tool parameter a model can influence is untrusted input, and this is what that principle looks like when nobody applies it.