{"id":"ghsa-ghsa-qr6x-7v33-6qmg","seq":1708822,"kind":"advisory","title":"Rembg: Unauthenticated SAM model injection permits local-file disclosure through malicious ONNX graphs","url":"https://github.com/advisories/GHSA-qr6x-7v33-6qmg","permalink":"https://vulnpulse.app/items/ghsa-ghsa-qr6x-7v33-6qmg","summary":"影響: pip:rembg < 2.0.82 → 2.0.82\nThe public /api/remove endpoint uses attacker-controlled extras.sam_model in both SAM filenames and GitHub download URLs. Path traversal plus a URL fragment lets an unauthenticated attacker place malicious ONNX models beside a target file. The models read the file as ONNX external data and encode its bytes into the returned PNG. This issue affects SAM's sam_model in 2.0.81 and returns complete file contents. Screenshot 1 — First unauthenticated request primes the path and returns HTTP 500. Tech…","severity":"high","techs":["python"],"cves":["CVE-2026-115924"],"tags":["GHSA-qr6x-7v33-6qmg","rembg"],"source":{"id":"ghsa","name":"GitHub Advisory Database"},"published_at":"2026-10-27T14:45:36.000Z","fetched_at":"2026-10-27T21:03:52.214Z"}