CVE-2026-115924 Rembg: Unauthenticated SAM model injection permits local-file disclosure through malicious ONNX graphs

Rembg is a tool to remove images background. Prior to 2.0.82, the public /api/remove endpoint passes attacker-controlled extras.sammodel through rembg/commands/scommand.py to rembg/sessions/sam.py, where it is interpolated into SAM filenames and GitHub download URLs passed to pooch.retrieve witho...