The compliance-trestle library's profile import mechanism resolves 'trestle://' URIs and relative file paths by joining them with the trestle_root directory and calling .resolve(), but it does not verify that the resolved path remains within the trestle workspace. This lack of boundary checking enables an attacker to craft a malicious OSCAL profile YAML file with path traversal sequences in imports[].href, allowing arbitrary file read access on the server filesystem. Versions 3.12.3 and 4.0.3 include patches that address this vulnerability.

An unauthenticated attacker can exploit this vulnerability by supplying a malicious OSCAL profile YAML file to read arbitrary files on the server filesystem outside the intended workspace. This can lead to disclosure of sensitive information. The CVSS 4.0 base score is 6.9 (medium severity), reflecting network attack vector, low attack complexity, no privileges required, user interaction required, and high impact on confidentiality.

Upgrade compliance-trestle to version 3.12.3 or later, or 4.0.3 or later, where this path traversal vulnerability has been fixed. No other mitigations are indicated by the vendor advisory. Patch status is confirmed by the version information in the description.