crates.io/rtk CVE-2026-45792: medium 5.5, EPSS 0.11%

RTK improperly trusts project-local filter configuration, allowing silent tampering of command output shown to LLM

Action: Upgrade rtk to 0.32.0 or later.

cargo update -p rtk --precise 0.32.0

Affected

Fixed versions

Sources

• osv: GHSA-fvvm-949w-qj4w
• https://github.com/rtk-ai/rtk/security/advisories/GHSA-fvvm-949w-qj4w
• https://nvd.nist.gov/vuln/detail/CVE-2026-45792
• https://github.com/rtk-ai/rtk/pull/623
• https://github.com/rtk-ai/rtk/pull/625
• https://github.com/rtk-ai/rtk

CVE-2026-45792 · published 2026-05-20T15:30:04Z · modified 2026-07-20T21:30:35.825828290Z · JSON