PYSEC-2026-3046
RAGAS has SSRF via Multi-Modal Faithfulness Collections Module
Details
A security flaw has been discovered in vibrantlabsai RAGAS up to 0.4.3. The affected element is the function _try_process_local_file/_try_process_url of the file src/ragas/metrics/collections/multi_modal_faithfulness/util.py of the component Collections Module. Performing a manipulation of the argument retrieved_contexts results in server-side request forgery. The attack can be initiated remotely. The exploit has been released to the public and may be used for attacks. The security patch for CVE-2025-45691 was applied to a different module only. The vendor was contacted early about this disclosure but did not respond in any way.
Are you affected?
Enter the version of the package you're using.
Affected packages
0.2.3No fixed version published yet for ragas (pip). Pin to a known-safe version or switch to an alternative.
References
- https://nvd.nist.gov/vuln/detail/CVE-2026-6587[ADVISORY]
- https://adithyanak.com/ragas-v0214-arbitrary-file-read-vulnerability[WEB]
- https://github.com/vibrantlabsai/ragas[PACKAGE]
- https://vuldb.com/submit/791088[WEB]
- https://vuldb.com/vuln/358222[WEB]
- https://vuldb.com/vuln/358222/cti[WEB]
- https://pypi.org/project/ragas[PACKAGE]
- https://github.com/advisories/GHSA-95ww-475f-pr4f[ADVISORY]