surya 0.22.1 screenshot server contains an unauthenticated arbitrary file read vulnerability in the /info, /page, and /process routes that accept raw file_path parameters. Attackers can read any image or PDF file on the host by supplying arbitrary file paths to Image.open or pypdfium2.PdfDocument, obtaining rendered contents as base64 and using /info as an existence oracle.

Surya version 0.22.1 contains an unauthenticated arbitrary file read vulnerability in its screenshot server component. The vulnerable routes /info, /page, and /process accept raw file_path parameters without validation or authentication. Attackers can exploit this by supplying arbitrary file paths to Image.open or pypdfium2.PdfDocument to read any image or PDF file on the host system. The rendered file contents are returned as base64-encoded data, enabling exfiltration. The /info endpoint can additionally be abused as an existence oracle to enumerate files on the filesystem. No authentication is required to exploit this vulnerability, making it trivially accessible to remote attackers. The issue is tracked under CVE-2026-85687 and has been reported via GitHub issues and VulnCheck advisories.