Current aligned models can reject explicit harmful requests, yet may remain vulnerable when harmful intent is distributed across semantically related descriptions. Existing jailbreak methods often rely on surface-form manipulation, decomposition, or visual obfuscation, but the harmful objective may still remain detectable by modern safety safeguards. We present State2State (S2S), a state-transition-based, single-turn black-box jailbreak framework that targets a core weakness of current aligned models: compositional blindness. S2S rewrites a harmful request into a pair of original-state and final-state descriptions, then prompts the target model to explain the causal transition between them. Instead of directly processing an explicit harmful instruction, the model infers the malicious procedure as the logical bridge connecting the initial and final states. Controlled ablations further show that S2S remains highly effective when the state descriptions are provided as text only, while rendering them as visual inputs does not improve attack success. This suggests that the observed vulnerability is not driven solely by visual obfuscation, but is associated with compositional reasoning over transformation semantics. Across seven recent target models, S2S achieves 81.33% ASR on OpenAI o1, outperforming strong baselines by 74.63 to 81.33 percentage points and exposing a critical blind spot in current model safety safeguards.