CVE-2026-115924

The Rembg image background removal tool is vulnerable to local-file disclosure in versions prior to 2.0.82 . The issue exists because the public /api/remove endpoint accepts an attacker-controlled extras.sam_model parameter, which is interpolated into filenames and GitHub download URLs passed to ...