Lucene search
+L

1 matches found

Cvelist
Cvelist
added 2026/07/31 8:56 p.m.46 views

CVE-2026-68770 sentence-transformers Arbitrary Code Execution on Local Model Load Despite trust_remote_code=False

sentence-transformers contains a security control bypass vulnerability that allows attackers to achieve arbitrary code execution by exploiting a logic flaw in the importmoduleclass helper within sentencetransformers/util/misc.py, where the guard condition includes an 'or...

9.8CVSS0.00521EPSS
SaveExploits0References5
Rows per page
Query Builder