What is the CVSS score of CVE-2026-40086?

CVE-2026-40086 has a CVSS 3.1 base score of 5.3 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N. EPSS exploitation probability: 0.0%.

Is there a patch available for CVE-2026-40086?

Yes, a patch is available for CVE-2026-40086. Update the affected software to the latest version immediately.

Rembg CVE-2026-40086

EUVD-2026-21492 MEDIUM

Path Traversal (CWE-22)

2026-04-10 GitHub_M

GHSA-3wqj-33cg-xc48

Path Traversal Rembg Danielgatis

5.3

CVSS 3.1 · GitHub Advisory

Severity by source

GitHub Advisory PRIMARY

5.3 MEDIUM

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Primary rating from GitHub Advisory · only source for this CVE.

CVSS VectorGitHub Advisory

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

None

Availability

None

Lifecycle Timeline

Patch released

Apr 11, 2026 - 02:30 nvd

Patch available

EUVD ID Assigned

Apr 10, 2026 - 16:30 euvd

EUVD-2026-21492

Analysis Generated

Apr 10, 2026 - 16:30 vuln.today

CVE Published

Apr 10, 2026 - 16:16 nvd

MEDIUM 5.3

DescriptionGitHub Advisory

Rembg is a tool to remove images background. Prior to 2.0.75, a path traversal vulnerability in the rembg HTTP server allows unauthenticated remote attackers to read arbitrary files from the server's filesystem. By sending a crafted request with a malicious model_path parameter, an attacker can force the server to attempt loading any file as an ONNX model, revealing file existence, permissions, and potentially file contents through error messages. This vulnerability is fixed in 2.0.75.

AnalysisAI

Unauthenticated remote attackers can exploit a path traversal vulnerability in rembg's HTTP server (versions prior to 2.0.75) by sending a crafted request with a malicious model_path parameter to read arbitrary files from the server filesystem. The vulnerability allows attackers to enumerate file existence and permissions, and potentially extract file contents through verbose error messages when the server attempts to load arbitrary paths as ONNX models. This is a confirmed vulnerability with a vendor-released patch available in version 2.0.75.

Technical ContextAI

Rembg is a background removal tool that exposes an HTTP server interface. The vulnerability exists in the HTTP request handler that processes the model_path parameter without proper path validation, allowing directory traversal sequences (such as ../) to escape the intended model directory. This is a classic CWE-22 path traversal flaw. When the server attempts to open files specified via the traversal path, it may expose sensitive information through error messages that reveal file permissions, existence, and in some cases partial file contents. The vulnerability affects all versions of the danielgatis/rembg package prior to the patched release, as indicated by the CPE cpe:2.3:a:danielgatis:rembg:*:*:*:*:*:*:*:*.

RemediationAI

Vendor-released patch: Upgrade rembg to version 2.0.75 or later. This patch is available at https://github.com/danielgatis/rembg/releases/tag/v2.0.75. The fix includes proper path validation in the model_path parameter handler to prevent directory traversal attacks. Users unable to upgrade immediately should restrict network access to the rembg HTTP server to trusted IP addresses or network segments only, ensuring that the service is not directly exposed to the public internet or untrusted users. The upstream fix and detailed security advisory are available at https://github.com/danielgatis/rembg/security/advisories/GHSA-3wqj-33cg-xc48.