TI-2026-39393 CVE-2026-54555
rtk: Permission-gate bypass in rtk rewrite auto-allow via unsplit shell separators
Priority HIGH 69
rtk filters and compresses command outputs before they reach your LLM context.
Vulnerabilities
3 records
TI-2026-33527 CVE-2026-45792 · GHSA-fvvm-949w-qj4w
RTK improperly trusts project-local filter configuration, allowing silent tampering of command output shown to LLM
Priority MEDIUM 64
rtk filters and compresses command outputs before they reach your LLM context.
TI-2026-39922 CVE-2026-55249
@rtk-ai/rtk-rewrite: OpenClaw Rewrite Plugin Command Injection via execSync Template String
Priority HIGH 71
@rtk-ai/rtk-rewrite transparently rewrites shell commands executed via OpenClaw's exec tool to their RTK equivalents.