⌁ CyberSecurityBoardThreat Intel · CVEs · Products
Critical CVEs

CVE-2026-25592: Microsoft Semantic Kernel Command Injection Vulnerability

June 25, 2026

A vulnerability in Microsoft's Semantic Kernel agent framework where model output reaching a shell can lead to command injection. Patched by Microsoft.

Discovered from: Open-Source Android AI Agents Vulnerable to Invisible Screen Text Attacks Leading to Host Code Execution