Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

rtk-ai

rtk-ai rtk vulnerabilities

3 published CVEs name rtk-ai rtk among the affected products.

Newest CVEs

  • CVE-2026-54555

    rtk: Permission-gate bypass in rtk rewrite auto-allow via unsplit shell separators

    rtk-ai · rtk

    High7.8
  • CVE-2026-45792

    RTK improperly trusts project-local filter configuration, allowing silent tampering of command output shown to LLM

    rtk-ai · rtk

    Medium6.9
  • CVE-2026-55249

    @rtk-ai/rtk-rewrite: OpenClaw Rewrite Plugin Command Injection via execSync Template String

    rtk-ai · rtk

    Medium6.3