CVE-2025-45691
CVSS Score
7.5
EPSS Score
0.0%
EPSS Percentile
0th
An Arbitrary File Read vulnerability exists in the ImageTextPromptValue class in Exploding Gradients RAGAS v0.2.3 to v0.2.14. The vulnerability stems from improper validation and sanitization of URLs supplied in the retrieved_contexts parameter when handling multimodal inputs.
| Vendor | n/a |
| Product | n/a |
| Published | Mar 5, 2026 |
| Last Updated | Mar 6, 2026 |
Stay Ahead of the Next One
Get instant alerts for n/a n/a
Be the first to know when new high vulnerabilities affecting n/a n/a are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
n/a / n/a
n/a
References
adithyanak.com: https://adithyanak.com/ragas-v0214-arbitrary-file-read-vulnerability github.com: https://github.com/explodinggradients/ragas/pull/1559 github.com: https://github.com/explodinggradients/ragas/blob/e97886ac976465efb60e5949c5d69baf30cc811d/src/ragas/prompt/multi_modal_prompt.py#L202 github.com: https://github.com/vibrantlabsai/ragas/pull/1991