CVE-2026-85687: External Control of File Name or Path in datalab-to surya

The surya 0.22.1 screenshot server contains an unauthenticated arbitrary file read vulnerability in its /info, /page, and /process routes. These routes accept raw file_path parameters that are passed to Image.open or pypdfium2.PdfDocument without proper validation or sanitization. This flaw allows attackers to read arbitrary image or PDF files on the host system, retrieve their rendered contents encoded in base64, and use the /info endpoint to confirm file existence. The vulnerability has a CVSS 4.0 score of 8.7, indicating high severity, with network attack vector, no privileges or user interaction required, and high impact on confidentiality.

An unauthenticated attacker can read arbitrary image or PDF files on the host running the surya 0.22.1 screenshot server. This can lead to disclosure of sensitive information contained in these files. The vulnerability does not require authentication, privileges, or user interaction, making exploitation straightforward if the server is accessible. The ability to use /info as an existence oracle can aid attackers in enumerating files on the system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the affected endpoints (/info, /page, /process) to trusted users or networks. Implement input validation and sanitization on file_path parameters to prevent arbitrary file reads. Monitor for updates from the datalab-to project regarding an official fix.