Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2026-52776— Trestle URLSecurityValidator SSRF allowlist bypass via IPv4-mapped IPv6 and 0.0.0.0

Quick assessment

Affected
oscal-compass compliance-trestle
Exploitation
Public or AI PoC available; prioritize validation
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Compliance-trestle（Trestle）是一个用于将合规性作为代码进行管理的工具平台。在 3.12.4 之前的版本以及 4.0.0 至 4.0.3 版本中，用于防止服务器端请求伪造（SSRF）的 URLSecurityValidator 存在绕过漏洞，攻击者可利用该漏洞访问本应被阻止的环回地址、链路本地地址、云元数据服务地址以及内部网络端点。 具体而言，该黑名单未对 IPv4 映射的 IPv6 字面量（例如 ）进行规范化处理。这些地址在解析后会生成 IPv6Address 对象，从而无法匹配被阻止的

CVSS 8.6 · High

Possible ATT&CK Techniques 1 AI

T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-52776

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Trestle URLSecurityValidator SSRF allowlist bypass via IPv4-mapped IPv6 and 0.0.0.0
Source: CVE Program / CVE List V5
Vulnerability Description
Compliance-trestle (Trestle) is a tooling platform for managing compliance as code. In versions before 3.12.4 and versions 4.0.0 through 4.0.3, the URLSecurityValidator that guards trestle's remote-fetch paths against server-side request forgery can be bypassed to reach loopback, link-local, cloud-metadata, and internal network endpoints it was designed to block. The blocklist does not canonicalize IPv4-mapped IPv6 literals such as [::ffff:169.254.169.254], which resolve to IPv6Address objects that never match the blocked IPv4 ranges, and it does not block the unspecified address 0.0.0.0, which routes to local services on Linux and inside containers. An attacker who can supply or influence an OSCAL artifact that trestle fetches, such as a malicious profile whose imports reference one of these bypass URLs, can cause the HTTPSFetcher and SFTPFetcher paths to contact cloud instance-metadata services, loopback interfaces, or internal hosts. This issue is fixed in versions 3.12.4 and 4.1.0.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
不完整的黑名单
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
oscal-compass compliance-trestle < 3.12.4 -

II. Public POCs for CVE-2026-52776

# POC Description Source Link Shenlong Link
AI-Generated POC Premium
Qwen3.6-35B-A3B · 9497 chars
Pro+ exclusive includes:
Vulnerability reproduction recording (real sandbox build + trigger, exclusive)
In-depth vulnerability mechanism
Trigger conditions & impact
Full executable POC code
Exploit chain & mitigation
POC zip download
100+ AI POC generations per month

III. Intelligence Information for CVE-2026-52776

请登录查看更多情报信息。

Patches & Fixes for CVE-2026-52776 (1)

Vendor Advisories for CVE-2026-52776 (1)

Same Patch Batch · oscal-compass · 2026-08-25 · 4 CVEs total

CVE-2026-54757 7.8 HIGH Trestle has Server-Side Template Injection (SSTI) via Recursive Template Re-evaluation of
CVE-2026-57170 7.8 HIGH Trestle SSTI in Jinja2 include tags allows arbitrary code execution (Incomplete fix of CVE
CVE-2026-57171 7.7 HIGH Trestle is vulnerable to arbitrary file write via path traversal in author generate comman

IV. Related Vulnerabilities

Same product: compliance-trestle
Same vendor: oscal-compass
Same weakness: CWE-184

V. Comments for CVE-2026-52776

No comments yet

Leave a comment