CVE-2026-40086: Rembg is a tool to remove images background. Prior to 2.0.75, a path traversal vulnerability in the rembg HTTP server al

Rembg, a tool that removes image backgrounds, has a path traversal vulnerability (a flaw where attackers can access files outside the intended directory) in its HTTP server before version 2.0.75. An unauthenticated attacker can send a malicious request with a crafted model_path parameter to read arbitrary files from the server, potentially revealing file contents through error messages.