CVE-2026-115924

Name of the Vulnerable Software and Affected Versions Rembg versions prior to 2.0.82

Description The public '/api/remove' endpoint improperly handles the sam model variable, which is passed through rembg/commands/s command.py to rembg/sessions/sam.py. This variable is interpolated into SAM filenames and GitHub download URLs used by pooch.retrieve() without a pinned hash. An unauthenticated attacker can use path traversal and URL fragment syntax to manipulate the local POSIX path. By sending repeated requests, an attacker can download malicious ONNX encoder and decoder files. These files can then load target files via ONNX external data and encode the bytes into a returned PNG mask, leading to the disclosure of files accessible to the process and allowing arbitrary ONNX computation.

Recommendations Update to version 2.0.82.