A security flaw was identified in the RAGAS Collections module, specifically in the _try_process_url function of util.py. By manipulating the retrieved_contexts argument, an attacker can trigger a server‑side request forgery (SSRF) that allows the vulnerable server to issue arbitrary outbound HTTP requests. The flaw was publicly disclosed and can be exploited from a remote origin, potentially enabling access to internal networks or exfiltration of sensitive data.

The vulnerability affects installations of vibrantlabsai RAGAS version 0.4.3 and earlier. Any system running the Collections module within these versions is potentially at risk. No specific patch release is noted yet, and the vendor has not responded to disclosure attempts.

The CVSS score of 5.3 indicates moderate severity. The EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog. Attackers can remotely exploit the SSRF flaw through the exposed _try_process_url endpoint. Since a public exploit exists, the risk to environments lacking mitigation measures is significant.