CVE-2026-85687

Surya 0.22.1, an open-source OCR/document-processing toolkit, ships a screenshot server whose /info, /page, and /process routes accept raw file_path parameters without validation (CWE-73). A remote, unauthenticated attacker can supply an arbitrary filesystem path, which the server opens with PIL's Image.open or pypdfium2's PdfDocument; the /page and /process routes return the rendered file contents base64-encoded, while /info leaks whether a given path exists, serving as an existence oracle. This lets an attacker read any image or PDF file on the host (confidentiality impact rated high in the 8.7 CVSS 4.0 score, with no integrity or availability impact). Anyone running the surya screenshot server at version 0.22.1 is affected, with the greatest risk where the server is reachable by untrusted clients rather than bound only to localhost. No public proof-of-concept is known, the issue is not in CISA KEV, and EPSS puts 30-day exploitation probability at just 0.3%, so no exploitation is currently known.

What to do: Upgrade surya to a patched release as published by the project (no fixed version is specified in the advisory); until then, restrict the screenshot server to trusted networks or localhost, firewall it from unauthenticated access, and validate or constrain file_path inputs. Check server logs for requests to /info, /page, or /process carrying absolute or unusual file paths, which would indicate probing for arbitrary file reads.