CVE-2026-57171

Name of the Vulnerable Software and Affected Versions Compliance-trestle versions prior to 3.12.4 Compliance-trestle versions 4.0.0 through 4.0.3

Description Compliance-trestle is a Python SDK and command-line tool for managing OSCAL compliance documents. The catalog-generate, profile-generate, and ssp-generate author commands write generated Markdown to an output path without proper path-traversal validation. This occurs because these commands use an is directory name allowed() check instead of the PathSecurityValidator.validate local path() guard, allowing an absolute path or traversal sequences to escape the workspace. An attacker can write arbitrary files to a chosen location as the process owner if the output argument is derived from untrusted data. Additionally, using the --force-overwrite flag allows for the recursive deletion of an attacker-chosen directory tree, which could lead to indirect code execution by overwriting files used in subsequent pipeline stages.

Recommendations Update to version 3.12.4 or later. Update to version 4.1.0 or later.