GitHub Advisoryadvisory · PyPI
GHSA-v2xr-wvrv-p969 RAGAS has an Arbitrary File Read vulnerability
HIGH
Official page ↗
- Aliases
- CVE-2025-45691
- Ecosystem
- PyPI
- Packages
- ragas
- Severity
- High
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- Weaknesses
- CWE-22, CWE-770, CWE-918
- Reviewed
- 2026-03-06
Affected packages
• PyPI ragas: >= 0.2.3, < 0.3.0-rc1 → fixed in 0.3.0-rc1
Description
An Arbitrary File Read vulnerability exists in the ImageTextPromptValue class in Exploding Gradients RAGAS v0.2.3 to v0.2.14. The vulnerability stems from improper validation and sanitization of URLs supplied in the retrieved_contexts parameter when handling multimodal inputs.
Related
Alias · CVE (1)
- CVE-2025-45691 An Arbitrary File Read vulnerability exists in the ImageTextPromptValue class in Exploding Gradients RAGAS v0.2.3 to v0.2.14. vulnerability
References
- https://nvd.nist.gov/vuln/detail/CVE-2025-45691 advisory
- https://github.com/explodinggradients/ragas/pull/1559 web
- https://github.com/vibrantlabsai/ragas/pull/1991 web
- https://github.com/vibrantlabsai/ragas/commit/b28433709cbedbb531db79dadcfbdbd3aa6adcb0 web
- https://adithyanak.com/ragas-v0214-arbitrary-file-read-vulnerability web
- https://github.com/explodinggradients/ragas/blob/e97886ac976465efb60e5949c5d69baf30cc811d/src/ragas/prompt/multi_modal_prompt.py#L202 web
- https://github.com/vibrantlabsai/ragas package