{"action":"Upgrade sentence-transformers to 5.6.0 or later.","affected":[{"fixed":"5.6.0","introduced":"0"}],"component":"sentence-transformers","cve_ids":["CVE-2026-68770"],"ecosystem":"PyPI","epss":0.00909,"exploited":false,"fixed_versions":["5.6.0"],"ghsa_id":"GHSA-jhr6-gm9c-rqjv","id":"tcs_01M5KFP1C7RCWFPDSW4B0NG0ES","modified_at":"2026-10-01T17:55:41.036478465Z","published_at":"2026-07-31T21:31:59Z","references":["https://osv.dev/vulnerability/GHSA-jhr6-gm9c-rqjv","https://nvd.nist.gov/vuln/detail/CVE-2026-68770","https://github.com/huggingface/sentence-transformers/issues/3801","https://github.com/huggingface/sentence-transformers/pull/3807","https://github.com/huggingface/sentence-transformers/pull/3935","https://github.com/huggingface/sentence-transformers/commit/626eb602b088878a8173bcab69225f68411b99e1","https://github.com/huggingface/sentence-transformers/commit/ae1acc3fb2aa2004577b297eb4a915ce7a03316a","https://github.com/huggingface/sentence-transformers","https://github.com/huggingface/sentence-transformers/releases/tag/v5.6.0","https://github.com/huggingface/sentence-transformers/releases/tag/v6.0.0","https://www.vulncheck.com/advisories/sentence-transformers-arbitrary-code-execution-on-local-model-load-despite-trust-remote-code-false"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-jhr6-gm9c-rqjv","url":"https://osv.dev/vulnerability/GHSA-jhr6-gm9c-rqjv"}],"summary":"sentence-transformers local model loading bypasses trust_remote_code and executes custom Python"}