Skip to content
OpenAdvisories

Product · rtk-ai

rtk

3 known vulnerabilities.

1 result · Clear filters · Feed

  • High 7.8

    rtk: Permission-gate bypass in rtk rewrite auto-allow via unsplit shell separators

    rtk filters and compresses command outputs before they reach your LLM context. Prior to 0.42.2, the permission splitter did not conservatively split or reject several shell constructs that Bash treats as command execution boundaries or nested execution. As a …