CVE-2026-57170: CWE-94: Improper Control of Generation of Code ('Code Injection') in oscal-compass compliance-trestle

Compliance-trestle is a Python SDK and CLI tool for managing OSCAL compliance documents. In affected versions prior to 3.12.4 and 4.0.0 through 4.0.3, the custom Jinja2 include tags mdsection_include and md_clean_include re-parse included Markdown content as Jinja2 template code without sandboxing. This allows server-side template injection (SSTI) because the environment used is a plain jinja2.Environment rather than a SandboxedEnvironment. As a result, attacker-controlled OSCAL data containing Jinja2 syntax can be executed during template rendering, leading to arbitrary code execution. The vulnerability is addressed in version 4.1.0.

Successful exploitation allows an attacker with at least local privileges to execute arbitrary code on the host system via server-side template injection. This can lead to full compromise of the affected system, including confidentiality, integrity, and availability impacts as indicated by the CVSS vector (C:H/I:H/A:H).

Upgrade to compliance-trestle version 4.1.0 or later, where this vulnerability is fixed by using a sandboxed Jinja2 environment for template parsing. Patch status is not explicitly confirmed in the advisory, but the fix is stated to be in version 4.1.0. Until upgrade, avoid processing untrusted OSCAL data that could contain malicious Jinja2 syntax in included Markdown files.