CVE-2025-45691

PoC ×3—

CVSS 3.1

7.5 high

EPSS

<1%p44

Published

Mar 5, 2026 (Mar 5, 2026)

Modified

Jul 15, 2026

Description

An Arbitrary File Read vulnerability exists in the ImageTextPromptValue class in Exploding Gradients RAGAS v0.2.3 to v0.2.14. The vulnerability stems from improper validation and sanitization of URLs supplied in the retrieved_contexts parameter when handling multimodal inputs.

Vendors: vibrantlabsai
Products: ragas
Weakness: CWE-22, CWE-918
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news0 stories

No ingested article mentions this CVE yet.