CVE-2026-55249

Name of the Vulnerable Software and Affected Versions @rtk-ai/rtk-rewrite version 1.0.0

Description The @rtk-ai/rtk-rewrite OpenClaw plugin fails to properly escape input passed to a shell-backed execSync() function. While JSON.stringify() is used to wrap values in double quotes, it does not neutralize shell metacharacters such as $() and backticks. Since execSync() delegates execution to /bin/sh -c, the shell performs command substitution within double-quoted strings. An attacker capable of influencing the command parameter of the exec tool, such as through an LLM agent prompt or gateway input, can execute arbitrary operating system commands with the privileges of the plugin or gateway process.

Recommendations Update @rtk-ai/rtk-rewrite to a version newer than 1.0.0. As a temporary mitigation, restrict or sanitize the command parameter used in the exec tool to prevent the injection of shell metacharacters.