ragasGHSA-v2xr-wvrv-p969
RAGAS has an Arbitrary File Read vulnerability
High7.5CVE-2025-45691 · Published Mar 5, 2026 · updated Jul 13, 2026
An Arbitrary File Read vulnerability exists in the ImageTextPromptValue class in Exploding Gradients RAGAS v0.2.3 to v0.2.14. The vulnerability stems from improper validation and sanitization of URLs supplied in the retrieved_contexts parameter when handling multimodal inputs.
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| ragas PyPI | >= 0.2.3, < 0.3.0-rc1 | 0.3.0-rc1 |
Details and references
- CVSS 3.1
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- Severity from
- GitHub (reviewed advisory)
- Weakness
- CWE-22, CWE-770, CWE-918
- Also known as
- CVE-2025-45691, PYSEC-2026-3047
- nvd.nist.gov/vuln/detail/CVE-2025-45691
- github.com/explodinggradients/ragas/pull/1559
- github.com/vibrantlabsai/ragas/pull/1991
- github.com/vibrantlabsai/ragas/commit/b28433709cbedbb531db79dadcfbdbd3aa6adcb0
- adithyanak.com/ragas-v0214-arbitrary-file-read-vulnerability
- github.com/explodinggradients/ragas/blob/e97886ac976465efb60e5949c5d69baf30cc811d/src/ragas/prompt/multi_modal_prompt.py#L202
- github.com/vibrantlabsai/ragas
More ragas advisories
All ragas| Date | Advisory | Severity | Fixed in |
|---|---|---|---|
| Apr 20 | RAGAS has SSRF via Multi-Modal Faithfulness Collections Module Low6.3Apr 20 | Low6.3 | No fix yet |