PyPI/sentence-transformers CVE-2026-68770: critical 9.8, EPSS 0.91%

sentence-transformers local model loading bypasses trust_remote_code and executes custom Python

Action: Upgrade sentence-transformers to 5.6.0 or later.

pip install sentence-transformers==5.6.0

Affected

Fixed versions

Sources

• osv: GHSA-jhr6-gm9c-rqjv
• https://nvd.nist.gov/vuln/detail/CVE-2026-68770
• https://github.com/huggingface/sentence-transformers/issues/3801
• https://github.com/huggingface/sentence-transformers/pull/3807
• https://github.com/huggingface/sentence-transformers/pull/3935
• https://github.com/huggingface/sentence-transformers/commit/626eb602b088878a8173bcab69225f68411b99e1
• https://github.com/huggingface/sentence-transformers/commit/ae1acc3fb2aa2004577b297eb4a915ce7a03316a
• https://github.com/huggingface/sentence-transformers
• https://github.com/huggingface/sentence-transformers/releases/tag/v5.6.0
• https://github.com/huggingface/sentence-transformers/releases/tag/v6.0.0
• https://www.vulncheck.com/advisories/sentence-transformers-arbitrary-code-execution-on-local-model-load-despite-trust-remote-code-false

CVE-2026-68770 · published 2026-07-31T21:31:59Z · modified 2026-10-01T17:55:41.036478465Z · JSON