sentence-transformers contains a security control bypass vulnerability that allows attackers to achieve arbitrary code execution by exploiting a logic flaw in the import_module_class helper within sentence_transformers/util/misc.py, where the guard condition includes an 'or os.path.exists(model_name_or_path)' clause that satisfies the trust gate whenever the supplied path exists on the local filesystem, regardless of the trust_remote_code=False argument. Attackers who can control or influence the contents of a model directory on disk can place malicious Python files such as modeling_*.py referenced via modules.json, causing the code to execute at import time when an application loads the model with SentenceTransformer(path, trust_remote_code=False), bypassing the documented security contract and achieving code execution within the loading process.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - sentence-transformers contains a security control bypass vulnerability that allows attackers to achieve
    arbitrary code execution by exploiting a logic flaw in the import_module_class helper within
    sentence_transformers/util/misc.py, where the guard condition includes an 'or
    os.path.exists(model_name_or_path)' clause that satisfies the trust gate whenever the supplied path exists
    on the local filesystem, regardless of the trust_remote_code=False argument. Attackers who can control or
    influence the contents of a model directory on disk can place malicious Python files such as modeling_*.py
    referenced via modules.json, causing the code to execute at import time when an application loads the
    model with SentenceTransformer(path, trust_remote_code=False), bypassing the documented security contract
    and achieving code execution within the loading process. (CVE-2026-68770)

ID	Name	Product	Family	Type	Severity
471220	Echo: sentence-transformers: security update to 5.6.0	Tenable Cloud Security	Echo Local Security Checks	Local	critical
471220	Echo: sentence-transformers: security update to 5.6.0	Tenable Self-Hosted Container Security	Echo Local Security Checks	Local	critical
466064	Chainguard: multiple open-webui packages: security update to 0.11.4-r2	Tenable Cloud Security	Chainguard Local Security Checks	Local	critical
466064	Chainguard: multiple open-webui packages: security update to 0.11.4-r2	Tenable Self-Hosted Container Security	Chainguard Local Security Checks	Local	critical

Detections

Analytics

CVE-2026-68770

critical

Tenable Plugins

critical

critical

critical

critical