rtk-ai vulnerabilities
3 published CVEs name rtk-ai among the affected products.
- 3Published CVEs3 of them scored
- 3Last 12 monthspublished in the last year
- 0Critical1 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-54555
rtk: Permission-gate bypass in rtk rewrite auto-allow via unsplit shell separators
rtk-ai · rtk
High7.8 - CVE-2026-45792
RTK improperly trusts project-local filter configuration, allowing silent tampering of command output shown to LLM
rtk-ai · rtk
Medium6.9 - CVE-2026-55249
@rtk-ai/rtk-rewrite: OpenClaw Rewrite Plugin Command Injection via execSync Template String
rtk-ai · rtk
Medium6.3