rembg vulnerabilities

2 known vulnerabilities in rembg from Danielgatis. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.6 High severity

  rembg: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2026-115924Oct 26, 2026Danielgatis

  Rembg is a tool to remove images background. Prior to 2.0.82, the public /api/remove endpoint passes attacker-controlled extras.sam_model through rembg/commands/s_command.py to rembg/sessions/sam.py, where it is interpolated into SAM filenames and GitHub downl

• 7.5 High severity

  rembg: Server-Side Request Forgery

  CVE-2025-25301Mar 3, 2025Danielgatis

  Rembg is a tool to remove images background. In Rembg 2.0.57 and earlier, the /api/remove endpoint takes a URL query parameter that allows an image to be fetched, processed and returned. An attacker may be able to query this endpoint to view pictures hosted on