Attack Chain

1. The attacker gains local access to a system with compliance-trestle installed.
2. The attacker crafts a malicious template file (e.g., template.j2) containing arbitrary content.
3. The attacker executes the trestle author jinja command, specifying the malicious template file using the -i parameter.
4. The attacker uses the -o parameter to specify an output path containing path traversal sequences (e.g., subdir\..\..\..\..\..\poc.txt) or an absolute path.
5. Due to insufficient validation, the application writes the content of the template file to the attacker-specified location outside the intended workspace.
6. The attacker overwrites a sensitive file, such as .github/workflows/*.yml or .git/hooks/*.
7. If a .github/workflows/*.yml file is overwritten, the next CI/CD run executes attacker-controlled code.
8. If a .git/hooks/* file is overwritten, a subsequent git command executes attacker-controlled code.

Impact

Successful exploitation of this vulnerability allows an attacker to write arbitrary files outside the intended workspace directory, potentially overwriting sensitive files writable by the user running the trestle command. This can lead to various impacts, including CI/CD compromise by overwriting .github/workflows/*.yml files, resulting in the execution of attacker-controlled GitHub Actions workflows. Overwriting .git/hooks/* files can lead to local code execution when git commands are run. Additionally, user configuration files such as .bashrc can be modified, and repository files and generated compliance artifacts can be tampered with. In CI/CD environments, this can result in the execution of attacker-controlled commands on build runners, leading to potential data breaches or system compromise.

Recommendation

• Apply the patch or upgrade to compliance-trestle version 4.0.3 or later to address CVE-2026-46345.
• Deploy the Sigma rules provided in this brief to detect exploitation attempts.
• Implement strict input validation on the -o/--output argument within trestle author jinja to prevent path traversal (reference vulnerability description).
• Monitor file system events for suspicious file writes outside the intended workspace directory using process creation logs.