Rtk-rewrite vulnerabilities

1 known vulnerability in Rtk-rewrite from Rtkai. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  rtk: Improper Neutralization of Special Elements used in an OS Command

  CVE-2026-55249Jun 23, 2026Rtk-ai

  @rtk-ai/rtk-rewrite transparently rewrites shell commands executed via OpenClaw's exec tool to their RTK equivalents. In 1.0.0, the @rtk-ai/rtk-rewrite OpenClaw plugin passes attacker-controlled input directly into a shell-backed execSync() template string wit