CVE-2026-45792 Details

A vulnerability exists in RTK (Rust Token Killer) versions prior to 0.32.0, where the application improperly trusts project-local configuration files. RTK automatically loads '.rtk/filters.toml' from the working directory with the highest priority and without user notification. This behavior allows an attacker to place a malicious filter file in a repository, which can then be used to apply regex-based modifications to shell command output before it is presented to the LLM. The modification occurs without any indication that the output has been altered. As a result, attackers can selectively suppress or change command output, including file contents, diffs, and security scan results, potentially concealing malicious code during AI-assisted development or review.

Users can update to RTK version 0.32.0 or later, where this vulnerability has been fixed. In version 0.32.0, untrusted project filters are blocked by default, with a visible warning. Users can review and enable these filters by running the 'rtk trust' command. Additionally, a trust store has been implemented to manage filter trust explicitly.