CVE-2026-55249

@rtk-ai/rtk-rewrite transparently rewrites shell commands executed via OpenClaw's exec tool to their RTK equivalents. In 1.0.0, the @rtk-ai/rtk-rewrite OpenClaw plugin passes attacker-controlled input directly into a shell-backed execSync() template string without shell-safe escaping. JSON.stringify() wraps the value in double quotes and escapes inner double-quotes and backslashes, but leaves $() and backtick shell metacharacters untouched. Because execSync delegates execution to /bin/sh -c, the shell expands $(...) substitutions even inside double-quoted strings, causing the injected subcommand to execute before rtk is invoked. An attacker who can influence the exec tool's command parameter (e.g., via an LLM agent prompt or gateway/tool-call input) achieves arbitrary OS command execution with the privileges of the plugin/gateway process.

• CWE-78

• https://github.com/rtk-ai/rtk/security/advisories/GHSA-fqgj-m2gp-mr3qExploit, Patch, Third Party Advisory
• https://github.com/rtk-ai/rtk/security/advisories/GHSA-fqgj-m2gp-mr3qExploit, Patch, Third Party Advisory

Published

Jun 23, 2026

Last Modified

Jul 1, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-55233OpenResty is a high performance web platform. From 1.29.2.1 …7.5
• CVE-2026-55234Wekan is open source kanban built with Meteor. Prior to 9.37…8.5
• CVE-2026-55237AutoGPT is a workflow automation platform for creating, depl…8.8
• CVE-2026-55238xrdp is an open source RDP server. Versions 0.10.6 and prior…5.3
• CVE-2026-5524The Divi Form Builder plugin for WordPress is vulnerable to …9.8
• CVE-2026-55242ERPNext is a free and open source Enterprise Resource Planni…8.8
• CVE-2026-5525A stack-based buffer overflow vulnerability exists in Notepa…7.8
• CVE-2026-55254NCalc is a fast, lightweight expression evaluator for .NET. …4.8
• CVE-2026-55255Langflow is a tool for building and deploying AI-powered age…8.4
• CVE-2026-5526A security flaw has been discovered in Tenda 4G03 Pro up to …9.8
• CVE-2026-5527A weakness has been identified in Tenda 4G03 Pro 1.0/1.0re/0…5.5
• CVE-2026-55276Always-Incorrect Control Flow Implementation vulnerability i…9.1