Skip to content
OpenAdvisories

Vendor

rtk-ai

3 known vulnerabilities.

Products

rtk 3
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.9
    CVE-2026-45792

    RTK improperly trusts project-local filter configuration, allowing silent tampering of command output shown to LLM

    rtk filters and compresses command outputs before they reach your LLM context. Prior to 0.32.0, RTK (Rust Token Killer) improperly trusts project-local configuration files. RTK automatically loads .rtk/filters.toml from the working directory with highest prio…

    rtk-ai rtk rtk crates.io
  • Medium 6.3
    CVE-2026-55249

    @rtk-ai/rtk-rewrite: OpenClaw Rewrite Plugin Command Injection via execSync Template String

    @rtk-ai/rtk-rewrite transparently rewrites shell commands executed via OpenClaw's exec tool to their RTK equivalents. In 1.0.0, the @rtk-ai/rtk-rewrite OpenClaw plugin passes attacker-controlled input directly into a shell-backed execSync() template string wi…

    rtk-ai rtk