WA
Product
warp
10
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 9Medium 1Low 0
Watch
Add warp to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-48704 | 8.8 | Jun 24 | Warp Markdown notebook links may open executable local files Affected: >= 0.2023.10.24.08.03.stable_00, < 0.2026.05.13.09.15.stable_01 |
| CVE-2026-48720 | 8.8 | Jun 24 | Warp: SSH remote output can lead to local file overwrite and persistence Affected: >= 0.2025.03.05.08.02.stable_00, < 0.2026.05.13.09.15.stable_01 |
| CVE-2026-48732 | 8.8 | Jun 24 | Warp: Remote SSH cwd can lead to unauthorized remote command execution Affected: >= 0.2023.03.21.08.02.stable_00, < 0.2026.05.13.09.15.stable_01 |
| CVE-2026-48721 | 8.6 | Jun 24 | Warp: Env-var prefixes can lead to denylisted command autoexecution Affected: >= 0.2025.10.08.08.12.stable_00, < 0.2026.05.13.09.15.stable_01 |
| CVE-2026-48725 | 8.1 | Jun 24 | Warp may allow terminal output to access the local clipboard through OSC 52 Affected: >= 0.2021.04.25.23.05.stable_00, < v0.2026.05.13.09.15.stable_01 |
| CVE-2026-48719 | 8.0 | Jun 24 | Warp branch selector command injection via Git branch names Affected: >= 0.2025.08.06.08.12.stable_00, < 0.2026.05.13.09.15.stable_01 |
| CVE-2026-48731 | 7.8 | Jun 24 | Warp: Linux external editor command injection Affected: >= 0.2024.02.20.08.01.stable_01, < 0.2026.05.13.09.15.stable_01 |
| CVE-2026-48703 | 7.8 | Jun 24 | Warp: Command Injection via Warp code search tool arguments Affected: >= 0.2025.04.09.08.11.stable_00, < 0.2026.05.13.09.15.stable_01 |
| CVE-2026-54699 | 7.7 | Jun 24 | Warp: OS command injection when opening terminal links from WSL Affected: >= 0.2024.03.12.08.02.stable_01, < 0.2026.05.13.09.15.stable_01 |
| CVE-2026-54686 | 4.3 | Jun 24 | Warp: DCS lifecycle hook spoofing can alter terminal session metadata Affected: >= 0.2021.04.25.23.05.stable_00, < 0.2026.05.13.09.15.stable_01 |
Showing 10