vibrantlabsai RAGAS Collections util.py _try_process_url server-side request forgery
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Attack requirements
- None
- Impact type
- —
- Confidentiality · integrity · availability
- Low · Low · Low
- Fix status
- No fix listed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA and GitHub.
Summary
A security flaw has been discovered in vibrantlabsai RAGAS up to 0.4.3. The affected element is the function _try_process_local_file/_try_process_url of the file src/ragas/metrics/collections/multi_modal_faithfulness/util.py of the component Collections Module. Performing a manipulation of the argument retrieved_contexts results in server-side request forgery. The attack can be initiated remotely. The exploit has been released to the public and may be used for attacks. The security patch for CVE-2025-45691 was applied to a different module only. The vendor was contacted early about this disclosure but did not respond in any way.
Why it matters now
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- Poc
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| vibrantlabsai | RAGAS | 0.4.0; 0.4.1; 0.4.2; 0.4.3 | — | No fix listed | CNA |
| — | ragas (PyPI) | 0.2.3 – 0.4.3 | — | No fix listed | GHSA-95ww-475f-pr4f |
- RAGAS Vendorvibrantlabsai Affected 0.4.0; 0.4.1; 0.4.2; 0.4.3 Fixed in — No fix listed CNA
- ragas (PyPI) Vendor— Affected 0.2.3 – 0.4.3 Fixed in — No fix listed GHSA-95ww-475f-pr4f
Remediation
No fixed version listed by the sources yet.
Vendor assessments
Red Hat
Red Hat rating: Important. Red Hat's page for this CVE →
Not affected: 1 product
- Red Hat OpenShift AI (RHOAI)
Timeline
- 2026-10-02 Threatist record created from CVE-2026-6587
- 2026-10-03 Alias added: GHSA-95ww-475f-pr4f
References
More vibrantlabsai vulnerabilities
- TI-2025-28824 An Arbitrary File Read vulnerability exists in the ImageTextPromptValue class in… CVSS 3.1HIGH 7.5
Sources
- CVE-2026-6587 · CVE Program
- CVE-2026-6587 · NVD
- FIRST EPSS
- GHSA-95ww-475f-pr4f · GitHub Advisory Database · CC BY 4.0
- CVE-2026-6587 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences