Ragas security vulnerabilities

Ragas is an open-source toolkit developed by Vibrant Labs for optimizing and evaluating large language models. Versions of Ragas 0.4.3 and earlier contained a security vulnerability. This vulnerability stemmed from improper handling of the parameter retrievedcontexts in the...

CVE-2026-6587: Server-Side Request Forgery (SSRF)

A security flaw has been discovered in vibrantlabsai RAGAS up to 0.4.3. The affected element is the function tryprocesslocalfile/tryprocessurl of the file src/ragas/metrics/collections/multimodalfaithfulness/util.py of the component Collections Module. Performing a manipulation of the argument...

PT-2026-33656

Name of the Vulnerable Software and Affected Versions vibrantlabsai RAGAS versions prior to 0.4.4 Description A server-side request forgery exists in the Collections Module. A remote attacker can initiate this by manipulating the retrieved contexts argument within the try process local file and t...

catalog-agent (>=0.1.1, <=0.1.6), longtrainer (>=0.3.1, <=0.3.4) +2 more potentially affected by CVE-2026-41488 via langchain-openai (0.2.8)

langchain-openai PYPI version 0.2.8 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - catalog-agent =0.1.1, =0.3.1, =0.1.3, =0.1.4 Source cves: CVE-2026-41488 Source advisory: OSV:GHSA-R7W7-9XR2-QQ2R...

RAGAS has an Arbitrary File Read vulnerability

An Arbitrary File Read vulnerability exists in the ImageTextPromptValue class in Exploding Gradients RAGAS v0.2.3 to v0.2.14. The vulnerability stems from improper validation and sanitization of URLs supplied in the retrievedcontexts parameter when handling multimodal inputs...

EUVD-2025-208315

An Arbitrary File Read vulnerability exists in the ImageTextPromptValue class in Exploding Gradients RAGAS v0.2.3 to v0.2.14. The vulnerability stems from improper validation and sanitization of URLs supplied in the retrievedcontexts parameter when handling multimodal inputs...

aiqtoolkit (>=1.1.0a20251020, <=1.5.0a20260122), aiqtoolkit-agno (>=1.3.0, <=1.3.1) +40 more potentially affected by CVE-2025-45691 via ragas (>=0.2.6, <=0.2.15)

ragas PYPI version =0.2.6, =1.1.0a20251020, =1.3.0, =1.1.0a20250506, =1.3.0, =1.1.0a20251020, =1.3.0, =1.3.0, =2.8.1, =1.0.0, =1.1.0a20251020, =1.4.0a20251206, =1.1.0a20251020, =1.1.0a20251020, =1.4.0a20260106, =1.5.0a20260211, =1.5.0a20260218 and more Source cves: CVE-2025-45691 Source advisory:...

aiqtoolkit (>=1.1.0a20251020, <=1.5.0a20260122), aiqtoolkit-agno (>=1.3.0, <=1.3.1) +40 more potentially affected by CVE-2025-45691 via ragas (>=0.2.6, <=0.2.15)

ragas PYPI version =0.2.6, =1.1.0a20251020, =1.3.0, =1.1.0a20250506, =1.3.0, =1.1.0a20251020, =1.3.0, =1.3.0, =2.8.1, =1.0.0, =1.1.0a20251020, =1.4.0a20251206, =1.1.0a20251020, =1.1.0a20251020, =1.4.0a20260106, =1.5.0a20260211, =1.5.0a20260218 and more Source cves: CVE-2025-45691 Source advisory:...

GHSA-V2XR-WVRV-P969 RAGAS has an Arbitrary File Read vulnerability

An Arbitrary File Read vulnerability exists in the ImageTextPromptValue class in Exploding Gradients RAGAS v0.2.3 to v0.2.14. The vulnerability stems from improper validation and sanitization of URLs supplied in the retrievedcontexts parameter when handling multimodal inputs...

CVE-2025-45691

An Arbitrary File Read vulnerability exists in the ImageTextPromptValue class in Exploding Gradients RAGAS v0.2.3 to v0.2.14. The vulnerability stems from improper validation and sanitization of URLs supplied in the retrievedcontexts parameter when handling multimodal inputs...

CVE-2025-45691

An Arbitrary File Read vulnerability exists in the ImageTextPromptValue class in Exploding Gradients RAGAS v0.2.3 to v0.2.14. The vulnerability stems from improper validation and sanitization of URLs supplied in the retrievedcontexts parameter when handling multimodal inputs...

CVE-2025-45691: Improper Limitation of a Pathname to a Restricted Directory

An Arbitrary File Read vulnerability exists in the ImageTextPromptValue class in Exploding Gradients RAGAS v0.2.3 to v0.2.14. The vulnerability stems from improper validation and sanitization of URLs supplied in the retrievedcontexts parameter when handling multimodal inputs...

CVE-2025-45691

An Arbitrary File Read vulnerability exists in the ImageTextPromptValue class within Exploding Gradients RAGAS versions v0.2.3 to v0.2.14 . The flaw is caused by insufficient validation and sanitization of URLs provided in the retrieved_contexts parameter during the processing of multimodal input...

CVE-2025-45691

An Arbitrary File Read vulnerability exists in the ImageTextPromptValue class in Exploding Gradients RAGAS v0.2.3 to v0.2.14. The vulnerability stems from improper validation and sanitization of URLs supplied in the retrievedcontexts parameter when handling multimodal inputs...

CVE-2025-45691

An Arbitrary File Read vulnerability exists in the ImageTextPromptValue class in Exploding Gradients RAGAS v0.2.3 to v0.2.14. The vulnerability stems from improper validation and sanitization of URLs supplied in the retrievedcontexts parameter when handling multimodal inputs...

aiqtoolkit (>=1.1.0a20251020, <=1.5.0a20260122), aiqtoolkit-agno (>=1.3.0, <=1.3.1) +41 more potentially affected by CVE-2025-45691 via ragas (>=0.2.6, <=0.3.0rc2)

ragas PYPI version =0.2.6, =1.1.0a20251020, =1.3.0, =1.1.0a20250506, =1.3.0, =1.1.0a20251020, =1.3.0, =1.3.0, =2.8.1, =1.0.0, =1.1.0a20251020, =1.4.0a20251206, =1.1.0a20251020, =1.1.0a20251020, =1.4.0a20260106, =1.5.0a20260211, =1.5.0a20260218 and more Source cves: CVE-2025-45691 Source advisory:...

aiqtoolkit (>=1.1.0a20251020, <=1.5.0a20260122), aiqtoolkit-agno (>=1.3.0, <=1.3.1) +40 more potentially affected by CVE-2025-45691 via ragas (>=0.2.6, <=0.2.15)

ragas PYPI version =0.2.6, =1.1.0a20251020, =1.3.0, =1.1.0a20250506, =1.3.0, =1.1.0a20251020, =1.3.0, =1.3.0, =2.8.1, =1.0.0, =1.1.0a20251020, =1.4.0a20251206, =1.1.0a20251020, =1.1.0a20251020, =1.4.0a20260106, =1.5.0a20260211, =1.5.0a20260218 and more Source cves: CVE-2025-45691 Source advisory:...

Server-side Request Forgery (SSRF)

Overview ragas is an Evaluation framework for RAG and LLM applications Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via improper validation of URLs in the retrievedcontexts parameter when processing multimodal inputs. An attacker can access arbitrary files,...

lightspeed-stack (>=0.1.1, <=0.4.0), lightspeed-stack-providers (>=0.1.10, <=0.1.18) +5 more potentially affected by CVE-2026-25211 via llama-stack (>=0.2.9, <=0.3.5)

llama-stack PYPI version =0.2.9, =0.1.1, =0.1.10, =1.0.1, =0.3.4, =0.1.0, =0.2.0, =0.3.0a0 Source cves: CVE-2026-25211 Source advisory: SNYK:PYTHON-LLAMASTACK-15166608...

lightspeed-stack (>=0.1.1, <=0.4.2), lightspeed-stack-providers (>=0.1.10, <=0.4.3) +5 more potentially affected by CVE-2026-25211 via llama-stack (>=0.2.9, <=0.4.3)

llama-stack PYPI version =0.2.9, =0.1.1, =0.1.10, =1.0.1, =0.3.4, =0.1.0, =0.2.0, =0.3.0a0 Source cves: CVE-2026-25211 Source advisory: GHSA-XMFJ-7PP5-FXR6...