<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: rtk</title><description>Every new CVE for rtk.</description><link>https://agentprime.io/</link><item><title>CVE-2026-54555: rtk: Permission-gate bypass in rtk rewrite auto-allow via unsplit shell separators</title><link>https://agentprime.io/advisories/CVE-2026-54555/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-54555/</guid><description>CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 23 Jun 2026 19:05:20 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-55249: @rtk-ai/rtk-rewrite: OpenClaw Rewrite Plugin Command Injection via execSync Template String</title><link>https://agentprime.io/advisories/CVE-2026-55249/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-55249/</guid><description>CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 23 Jun 2026 18:33:46 GMT</pubDate><category>CVE</category></item></channel></rss>