CVE-2025-45691 Vibrantlabsai CVE debrief

Who should care

Security teams and administrators responsible for Exploding Gradients RAGAS installations, particularly those using versions between 0.2.3 and 0.2.14, should be aware of this vulnerability. Given the HIGH severity and ease of exploitation (AV:N/AC:L/PR:N/UI:N), immediate attention is required to mitigate potential risks. Red Hat and other affected users should prioritize patching or applying compensating controls.

Technical summary

The Arbitrary File Read vulnerability in RAGAS is caused by improper handling of multimodal inputs, specifically through the retrieved_contexts parameter. This allows attackers to read arbitrary files by manipulating URLs. The issue is addressed in later versions of RAGAS beyond 0.2.14. The CVSS vector is CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N, indicating Network attack vector, Low attack complexity, No privileges required, and High confidentiality impact.

Defensive priority

High priority should be given to patching RAGAS installations to version 0.2.15 or later. In the interim, defenders should monitor for suspicious multimodal input patterns and restrict access to sensitive files.

Recommended defensive actions

• Patch RAGAS installations to version 0.2.15 or later.
• Monitor for suspicious multimodal input patterns.
• Restrict access to sensitive files.
• Review and update input validation and sanitization processes.
• Implement compensating controls for file access monitoring.

Evidence notes

The CVE and NVD provide official details on the vulnerability. Multiple references, including exploit and patch information, are available from various sources like GitHub and Red Hat. However, specific details on exploitation are limited, suggesting a need for cautious verification and monitoring.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.