CVE-2026-26030

CVE-2026-26030: Eval Injection Reaches AI Agent Memory via Semantic Kernel

by
Ink-and-watercolor illustration of two glass conduit assemblies on a dark surface. The left assembly has no isolation fitting at the joint; amber fluid seeps through the threads into the mechanism housing, staining it amber. The right assembly has a dark navy isolation ring seated in the joint; amber fluid stops at the ring and the housing interior remains teal.

Three major AI agent frameworks shipped the same architectural flaw in fourteen months: a filter API that resolves caller-supplied strings through the host language’s runtime. If your team treats vector store query interfaces as infrastructure rather than injection surfaces, this design pattern analysis explains what your threat model is missing.