Medium severity · published Apr 10, 2026
CVE-2026-40086
Rembg has a Path Traversal via Custom Model Loading
5.3
CVSS
0.6%
EPSS
No
On KEV
Description
Rembg is a tool to remove images background. Prior to 2.0.75, a path traversal vulnerability in the rembg HTTP server allows unauthenticated remote attackers to read arbitrary files from the server's filesystem. By sending a crafted request with a malicious model_path parameter, an attacker can force the server to attempt loading any file as an ONNX model, revealing file existence, permissions, and potentially file contents through error messages. This vulnerability is fixed in 2.0.75.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
Low
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.6% · higher than 48% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RE
rembg · danielgatis
< 2.0.75 · source: vendor, NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-40086
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-40086
Patch
https://github.com/danielgatis/rembg/commit/7c76d3cdc5757ffbda6a76664b24cfbecdb80273
Product
https://github.com/danielgatis/rembg/releases/tag/v2.0.75
Exploit
https://github.com/danielgatis/rembg/security/advisories/GHSA-3wqj-33cg-xc48
More from rembg
8.6
CVE-2026-115924
Rembg: Unauthenticated SAM model injection permits local-file disclosure through malicious ONNX graphs
7.5
CVE-2025-25301
Rembg allows SSRF via /api/remove
6.5
CVE-2025-25302
Rembg CORS misconfiguration