CVE-2025-25302highCWE-346

CVE-2025-25302: high-severity vulnerability in danielgatis rembg

Rembg CORS misconfiguration

Published

Follow this CVE+ Monitor rembg+ Monitor rembg

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8.7epss 0.2%
Rembg is a tool to remove images background. In Rembg 2.0.57 and earlier, the CORS middleware is setup incorrectly. All origins are reflected, which allows any website to send cross site requests to the rembg server and thus query any API. Even if authentication were to be enabled, allow_credentials is set to True, which would allow any website to send authenticated cross site requests.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Affected products
danielgatis · rembg
Related CVEs — danielgatis rembg

In the same product, most dangerous first.

CVE-2026-40086MEDIUMRembg has a Path Traversal via Custom Model LoadingEPSS 0.6%CVE-2025-25301MEDIUMRembg allows SSRF via /api/removeEPSS 0.5%CVE-2026-115924HIGHRembg: Unauthenticated SAM model injection permits local-file disclosure through malicious ONNX graphsEPSS 0.4%