CVE-2026-85687 | datalab-to surya up to 0.22.1 Routes Image.open file_path path traversal

A vulnerability was found in datalab-to surya up to 0.22.1. It has been rated as problematic. This impacts the function Image.open of the component Routes. The manipulation of the argument file_path leads to path traversal.

This vulnerability is referenced as CVE-2026-85687. Remote exploitation of the attack is possible. No exploit is available.VulDB Recent EntriesRead More