sentence-transformers vulnerabilities

1 known vulnerability in sentence-transformers from Hugging Face. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  sentence-transformers: Improper Control of Generation of Code

  CVE-2026-68770Jul 31, 2026Hugging Face

  sentence-transformers contains a security control bypass vulnerability that allows attackers to achieve arbitrary code execution by exploiting a logic flaw in the import_module_class helper within sentence_transformers/util/misc.py, where the guard condition i