CVE-2026-25592

Named by 3 kept items in this workspace.

Search every workspace for CVE-2026-25592. It matches the name as written, so it can find other things that share it.

The items that name it 3

When Prompts Become Shells: RCE Vulnerabilities in AI Agent Frameworks (Semantic Kernel)
writeup2026-05-07
Arbitrary file write (and related arbitrary file read) vulnerability in Semantic Kernel's SessionsPythonPlugin; DownloadFileAsync in the .NET SDK was unintentionally exposed as a [KernelFunction] with an AI-controlled, unvalidated localFilePath parameter, allowing sandbox escape and host-level RCE v
Agent Threat Rules (ATR) — open detection-rule standard for AI agent threats
repo
Semantic Kernel autostart file write, published by MSRC on 2026-05-07
AutoJack Attack Lets One Web Page Hijack AI Agent for Host Code Execution
article

All cves in this workspace.