CVE-2026-40086

MediumCVSS 5.3

Published: 10/04/2026(UTC)Updated: 26/10/2026(UTC)Translated: 26/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.59%

48th percentile - higher than 48% of all known CVEs

Summary

In rembg before 2.0.75, a path traversal vulnerability in the HTTP server allows unauthenticated remote attackers to read arbitrary files from the filesystem. By sending a crafted model_path parameter, an attacker can force the server to attempt loading any file as an ONNX model, revealing file existence, permissions, and potentially contents.

Risk Assessment

An unauthenticated attacker could obtain file information and potentially contents, breaching confidentiality.

Recommendation

Update rembg to version 2.0.75, which fixes this vulnerability.

Other vulnerabilities in rembg

CVE-2026-115924High
Rembg prior to 2.0.82 passes attacker-controlled extras.sam_model into SAM filenames and GitHub download URLs without a pinned hash. An unauthenticated attacker can combine path traversal with URL fragment syntax to download malicious ONNX files beside a readable target file and disclose its contents in the returned PNG mask. The issue is fixed in version 2.0.82.

Original NVD description (English source)

Rembg is a tool to remove images background. Prior to 2.0.75, a path traversal vulnerability in the rembg HTTP server allows unauthenticated remote attackers to read arbitrary files from the server's filesystem. By sending a crafted request with a malicious model_path parameter, an attacker can force the server to attempt loading any file as an ONNX model, revealing file existence, permissions, and potentially file contents through error messages. This vulnerability is fixed in 2.0.75.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS