{"data":{"id":"bfabc024-2c41-4849-8498-36e3e6090567","title":"CVE-2026-54555: rtk filters and compresses command outputs before they reach your LLM context. Prior to 0.42.2, the permission splitter…","summary":"CVE-2026-54555 affects rtk, which filters command outputs before they reach an LLM context, in versions prior to 0.42.2. The permission splitter failed to conservatively split or reject several shell constructs that Bash treats as execution boundaries or nested execution, so a command starting with an allowed prefix such as git could conceal a second command. rtk rewrite returned exit code 0, and the Claude hook emitted permissionDecision: \"allow\", so the hidden command ran without the confirmation or denial the permission rules were meant to enforce.","solution":"Fixed in 0.42.2.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-54555","publishedAt":"2026-06-23T20:16:49.737Z","cveId":"CVE-2026-54555","cweIds":["CWE-863"],"cvssScore":"7.8","cvssSeverity":"high","severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":["Anthropic"],"affectedVendorsRaw":["rtk","Claude"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"rtk permission splitter bypass lets hidden commands run without confirmation","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"local","attackComplexity":"low","privilegesRequired":"none","userInteraction":"required","exploitMaturity":"unknown","epssScore":0.00196,"epssCheckedAt":"2026-11-10T18:05:34.786Z","kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-11-10T06:09:44.326Z","patchAvailable":null,"disclosureDate":"2026-06-23T20:16:49.737Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":["CAPEC-122"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["integrity","confidentiality"],"aiComponentTargeted":"plugin","llmSpecific":true,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":null,"fixes":[]}}