GHSA-2ww3-72rp-wpp4 Semantic Kernel has Arbitrary File Write via AI Agent Function Calling in .NET SDK

• PyPI semantic-kernel: < 1.39.3 → fixed in 1.39.3 • NuGet Microsoft.SemanticKernel.Core: < 1.71.0 → fixed in 1.71.0

Impact _What kind of vulnerability is it? Who is impacted?_ An Arbitrary File Write vulnerability has been identified in Microsoft's Semantic Kernel .NET SDK, specifically within the `SessionsPythonPlugin`. Developers who have built applications which include Microsoft's Semantic Kernel .NET SDK and are using the `SessionsPythonPlugin` Patches _Has the problem been patched? What versions should users upgrade to?_ The problem has been fixed in Microsoft.SemanticKernel.Plugins.Core version 1.71.0. Users should upgrade to version 1.71.0 or higher. Workarounds _Is there a way for users to fix or remediate the vulnerability without upgrading?_ Users can create a Function Invocation Filter which checks the arguments being passed to any calls to `DownloadFileAsync ` or `UploadFileAsync` and ensures the provided `localFilePath` is allow listed. References _Are there any links users can visit to find out more?_ • Sample showing safe use of the CodeInterpreterPlugin • PR to Add file upload security controls to SessionsPythonPlugin