CVE-2026-115924 | danielgatis rembg up to 2.0.81 SAM Sessions rembg/sessions/sam.py pooch.retrieve sam_model path traversal

October 26, 2026 Yanac

A vulnerability categorized as critical has been discovered in danielgatis rembg up to 2.0.81. Affected by this vulnerability is the function pooch.retrieve of the file rembg/sessions/sam.py of the component SAM Sessions. Such manipulation of the argument sam_model leads to path traversal.

This vulnerability is uniquely identified as CVE-2026-115924. The attack can be launched remotely. No exploit exists.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More