{"uuid": "140b3df5-a416-4a09-89d8-685c1712fd2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-68770", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mry5zesbhj2g", "content": "CRITICAL: Hugging Face sentence-transformers vuln (CVE-2026-68770) lets attackers run arbitrary code via local model dirs, bypassing trust_remote_code=False. Avoid untrusted models until patched. https://radar.offseq.com/threat/cve-2026-68770-improper-control-of-generation-of-code-code-injection-...", "creation_timestamp": "2026-08-01T00:00:38.115983Z"}