A Prompt Injection Turned Into a Shell: Inside Semantic Kernel's Two RCE CVEs

Two ordinary agent-framework conveniences, a filterable vector search and a file-download tool,...