CVE-2026-46345 compliance-trestle - jinja has an Arbitrary File Write via Path Traversal
Attackers can write arbitrary files outside the intended workspace via path traversal in the jinja author command, requiring an upgrade to patched versions.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-46345?
CVE-2026-46345 is a high-severity path traversal vulnerability in oscal-compass compliance-trestle, published on 17 Aug 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
compliance-trestle is a tooling platform for managing compliance as code. Prior to versions 3.12.2 and 4.0.3, the `-o/--output` argument in `trestle author jinja` allows writing files outside the intended workspace. The application does not properly validate, `../`, `..\`, or absolute paths. This allows arbitrary file write to attacker-controlled locations. Versions 3.12.3 and 4.0.3 patch the issue.
Which versions are affected by CVE-2026-46345?
5 open source packages ship an affected version, including compliance-trestle.
| Package | Affected | Fixed in |
|---|---|---|
compliance-trestle PyPI | All versions | 3.12.2, 4.0.3 |
compliance-trestle PyPI | All versions | 3.12.2 |
compliance-trestle PyPI | All versions | 3.12.2 |
compliance-trestle PyPI | From 4.0.0 | 4.0.3 |
compliance-trestle PyPI | From 4.0.0 | 4.0.3 |
How do I fix CVE-2026-46345?
Upgrade compliance-trestle to a fixed version for your release line: 3.12.2 or 4.0.3.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2026-46345 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-46345 exists.
Sources
Also known as GHSA-4q5v-7g7x-j79w, PYSEC-2026-2423.