medium2026-05-20 CVE-2026-45792-RTK improperly trusts project-local filter configuration, allowing silent tampering of command output shown to LLM GHSA-fvvm-949w-qj4w