Threat video1:00
CVE-2026-26030 Semantic Kernel RCE: Detection & IOCs
Semantic Kernel CVE-2026-26030 lets attacker-influenced agent input reach host code execution. 9 detection rules, 26 IOCs and a free Splunk SPL rule.
Read the full threat intel for CVE-2026-26030 Semantic Kernel RCE: Detection & IOCs →
Chapters
- 0:00The hookSemantic Kernel exposed: sandbox escape to RCE.
- 0:04The storyPython eval: filter sandbox escape.
- 0:11Attack pathMalicious prompt crafts filter; eval runs attacker code.
- 0:26AttributionNo threat actor is attributed.
- 0:31Indicators of compromise11 indicators to hunt: 1 domain, 2 URLs and 2 file names, and more.
- 0:38MITRE ATT&CK techniques25 ATT&CK techniques, from initial access to impact.
- 0:43Remediation6 steps now: Inventory every Semantic Kernel deployment.
- 0:50Detection rules9 detection rules, in SPL, KQL and Sigma.
Transcript
0:00Semantic Kernel exposed: sandbox escape to RCE.
0:05Python eval: filter sandbox escape.
0:08File plugin traversal writes to host.
0:11Malicious prompt crafts filter; eval runs attacker code.
0:15Dunder chain reaches subprocess or builtins.
0:18File plugin writes shell anywhere via path traversal.
0:21Persistence executes on next boot.
0:27No threat actor is attributed. Confidence: none.
0:3111 indicators to hunt: 1 domain, 2 URLs and 2 file names, and more.
0:3825 ATT&CK techniques, from initial access to impact.
0:436 steps now: Inventory every Semantic Kernel deployment.
0:519 detection rules, in SPL, KQL and Sigma.
0:56Threadlinqs. The unified security engineering platform.