Exploding Gradients RAGAS versions 0.2.3 through 0.2.14 are vulnerable to an arbitrary file read attack that could allow unauthorized access to sensitive local system files.

This vulnerability is an unauthenticated arbitrary file read flaw located within the ImageTextPromptValue class. The issue arises from the application failing to properly validate or sanitize URLs provided in the retrieved_contexts parameter, allowing an attacker to read arbitrary files from the host system.

Successful exploitation of this vulnerability permits an unauthenticated attacker to read sensitive files from the underlying server, potentially exposing configuration files, credentials, or proprietary source code. Given the CVSS score of 7.5, this high severity flaw poses a significant risk to data confidentiality and should be addressed as a priority to prevent unauthorized information disclosure.

Immediate Action: Update the RAGAS package to version 0.3.0-rc1 or later to incorporate the necessary input validation fixes.

Proactive Monitoring: Monitor server access logs for anomalous requests containing directory traversal patterns or unusual file path references in the retrieved_contexts parameter.

Compensating Controls: Implement a Web Application Firewall (WAF) to filter and block requests containing suspicious URL strings or path traversal sequences targeted at the vulnerable endpoint.

Public Exploit Available: Yes, a published proof-of-concept exists, attributed to the technical write-up provided by the security researcher in the vulnerability references.

The severity of this file read vulnerability necessitates immediate action to protect the integrity of the host environment. Organizations utilizing RAGAS within the affected version range must prioritize upgrading to version 0.3.0-rc1 or newer to eliminate the exposure. Failure to patch allows for potential exfiltration of sensitive system data, making the timely application of this update essential for maintaining a secure infrastructure.