CVE-2026-45792 describes an insufficient verification of data authenticity vulnerability in rtk (Rust Token Killer) before version 0.32.0. The tool automatically loads a project-local configuration file (.rtk/filters.toml) with the highest priority and without user notification. An attacker with write access to the repository can place a malicious filters.toml file that applies regex-based modifications to shell command outputs, such as stripping lines matching certain patterns. This manipulation can conceal malicious code or alter outputs like file contents, diffs, or security scan results before they reach the language model context, undermining the integrity of AI-assisted development or code review processes. The issue is resolved in rtk version 0.32.0.

Attackers can manipulate the output of shell commands by injecting malicious filter files into the project directory, causing selective suppression or alteration of command output without detection. This can conceal malicious code or tamper with security scan results during AI-assisted development or review, potentially leading to undetected vulnerabilities or malicious changes in the codebase.

This vulnerability is fixed in rtk version 0.32.0. Users should upgrade to version 0.32.0 or later to ensure that project-local configuration files are properly verified and trusted. Until upgraded, users should avoid running rtk in untrusted directories or repositories where an attacker could place malicious filter files. Patch status is not explicitly confirmed beyond the fixed version; users should verify with the vendor advisory for the latest remediation guidance.