CVE-2025-25302 json
Rembg CORS misconfiguration
published last yr. modified 4mo ago also EUVD-2025-6008 , GHSA-59qh-fmm7-3g9q , PYSEC-2025-25
- cvss
- 6.5
- version 3.1, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.2%
- EPSS 0.2% chance of exploitation in 30 days, percentile 9%
- public exploits
- 0
- none known
Summary
Rembg is a tool to remove images background. In Rembg 2.0.57 and earlier, the CORS middleware is setup incorrectly. All origins are reflected, which allows any website to send cross site requests to the rembg server and thus query any API. Even if authentication were to be enabled, allow_credentials is set to True, which would allow any website to send authenticated cross site requests.
Patch / fix
- pypi rembg 2.0.58
Is CVE-2025-25302 in your dependencies? Fencer shows which of your repositories are affected as soon as an advisory lands, and opens the fix as a pull request.
Check with FencerCISA SSVC
- Exploitation
- none
- Automatable
- yes
- Technical impact
- partial
- Assessed
- last yr.
Exploit prediction
0.19% chance of exploitation in the next 30 days, higher than 9% of all scored CVEs (FIRST EPSS, 2026-11-09).
Exploits and checks
- securitylab.github.com https://securitylab.github.com/advisories/GHSL-2024-161_GHSL-2024-162_rembg/ referenced PoC, tagged "exploit" by a source, unverified
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CNA | 4.0 | 8.7 | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N |
| CNA | 4.0 | 8.7 | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
| NVD | 3.1 | 6.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N |
| OSV | 3.1 | 6.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N |
Affected packages
| ecosystem | package | affected | fixed in |
|---|---|---|---|
| pypi | rembg | <=2.0.57 <2.0.58 |
2.0.58 |
Affected products
- danielgatis rembg
Classification
- Weakness
-
- CWE-346 Origin Validation Error
References
-
securitylab.github.com
/advisories/GHSL-2024-161_GHSL-2024-162_rembg/
exploit, third-party-advisory, advisory, evidence
-
github.com
/danielgatis/rembg/blob/d1e00734f8a996abf512a3a5c251c7a9a392c90a/rembg/commands/s_command.py#L93
web, product
-
nvd.nist.gov
/vuln/detail/CVE-2025-25302
advisory
-
github.com
/danielgatis/rembg
package
-
securitylab.github.com
/advisories/GHSL-2024-161_GHSL-2024-162_rembg
advisory
-
github.com
/advisories/GHSA-59qh-fmm7-3g9q
advisory
Sources
- CVE List CVE-2025-25302
- GitHub Advisory GHSA-59qh-fmm7-3g9q
- NVD CVE-2025-25302
- OSV PYSEC-2025-25
Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.
CPEs and fixed versions use Anchore's correction of NVD's data: Added CPE configurations because not yet analyzed by NVD.