CVE-2026-6587

Affected versions of the ragas package are vulnerable to Server-Side Request Forgery due to insufficient validation of attacker-controlled URL and file path arguments in the Collections Module. The flaw resides in the _try_process_local_file and _try_process_url functions in src/ragas/metrics/collections/multi_modal_faithfulness/util.py, which process the retrieved_contexts argument without restricting outbound destinations, and the previous patch for CVE-2025-45691 was applied only to a different module. A remote attacker can manipulate retrieved_contexts to coerce the package into issuing unauthorised requests to attacker-chosen destinations, with a public exploit available.