CVE-2026-40086 Details
Description
Rembg is a tool to remove images background. Prior to 2.0.75, a path traversal vulnerability in the rembg HTTP server allows unauthenticated remote attackers to read arbitrary files from the server's filesystem. By sending a crafted request with a malicious model_path parameter, an attacker can force the server to attempt loading any file as an ONNX model, revealing file existence, permissions, and potentially file contents through error messages. This vulnerability is fixed in 2.0.75.
A path traversal vulnerability has been identified in the Rembg HTTP server, prior to version 2.0.75. This vulnerability allows unauthenticated remote attackers to read arbitrary files from the server's filesystem. By sending a crafted request with a malicious 'model_path' parameter, an attacker can manipulate the server into loading any file as an ONNX model. This exploitation can reveal the existence, permissions, and potentially the contents of the file through error messages. The vulnerability arises from insufficient validation of file paths in the custom model feature, which is exposed via the HTTP API without restrictions.
Users are advised to update to Rembg version 2.0.75 or later, where this vulnerability has been fixed. For those who cannot update, consider disabling custom model support in the HTTP API or validating model paths against an allowlist.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Apr 10, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/danielgatis/rembg/commit/7c76d3cdc5757ffbda6a76664b24cfbecdb80273 | [email protected] | Patch |
| https://github.com/danielgatis/rembg/releases/tag/v2.0.75 | [email protected] | ProductRelease Notes |
| https://github.com/danielgatis/rembg/security/advisories/GHSA-3wqj-33cg-xc48 | [email protected] | ExploitMitigationVendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | [email protected] |
| CWE-73 | External Control of File Name or Path | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| danielgatis rembg | < 2.0.75 |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Apr 23, 2026 | Initial Analysis | [email protected] |
| Apr 10, 2026 | New CVE Received | [email protected] |