High severity · published Mar 3, 2025
CVE-2025-25301
Rembg allows SSRF via /api/remove
7.5
CVSS
0.5%
EPSS
No
On KEV
Description
Rembg is a tool to remove images background. In Rembg 2.0.57 and earlier, the /api/remove endpoint takes a URL query parameter that allows an image to be fetched, processed and returned. An attacker may be able to query this endpoint to view pictures hosted on the internal network of the rembg server. This issue may lead to Information Disclosure.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 44% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RE
rembg · danielgatis
<= 2.0.57 · source: vendor, NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-25301
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-25301
Exploit
https://securitylab.github.com/advisories/GHSL-2024-161_GHSL-2024-162_rembg/
More from rembg
8.6
CVE-2026-115924
Rembg: Unauthenticated SAM model injection permits local-file disclosure through malicious ONNX graphs
6.5
CVE-2025-25302
Rembg CORS misconfiguration
5.3
CVE-2026-40086
Rembg has a Path Traversal via Custom Model Loading