01 Record

CVE-2026-45725

compliance-trestle Remote Fetching Mechanism has an Arbitrary File Write via Cache Path Traversal

HighPUBLISHEDCNA: GitHub_M

Base score7.1 CVSS v4.0CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N

02 Description

compliance-trestle Remote Fetching Mechanism has an Arbitrary File Write via Cache Path Traversal

Published: 2026-08-13 19:22Z23 HR AGO
Last updated: 2026-08-13 19:22Z23 HR AGO
Reserved: 2026-05-13
Assigning CNA: GitHub_M
Record state: PUBLISHED
Severity: High (CVSS 7.1)
CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
Weaknesses: CWE-73
SSVC decision: No CISA-ADP assessment
Data version: 5.2
Document digest: 40d1bd7d5d23561849b63219d2ceffad8e64bb45e6acd85eb97ba8f810afa976

VendorProductVersionsPlatforms

oscal-compasscompliance-trestle< 3.12.2, >= 4.0.0, < 4.0.3—