WA
Vendor
warpdotdev
10
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-48704 | WA warp warpdotdev | 8.8 | Jun 24 | Warp Markdown notebook links may open executable local files |
| CVE-2026-48719 | WA warp warpdotdev | 8.0 | Jun 24 | Warp branch selector command injection via Git branch names |
| CVE-2026-48720 | WA warp warpdotdev | 8.8 | Jun 24 | Warp: SSH remote output can lead to local file overwrite and persistence |
| CVE-2026-48721 | WA warp warpdotdev | 8.6 | Jun 24 | Warp: Env-var prefixes can lead to denylisted command autoexecution |
| CVE-2026-48731 | WA warp warpdotdev | 7.8 | Jun 24 | Warp: Linux external editor command injection |
| CVE-2026-48732 | WA warp warpdotdev | 8.8 | Jun 24 | Warp: Remote SSH cwd can lead to unauthorized remote command execution |
| CVE-2026-54686 | WA warp warpdotdev | 4.3 | Jun 24 | Warp: DCS lifecycle hook spoofing can alter terminal session metadata |
| CVE-2026-54699 | WA warp warpdotdev | 7.7 | Jun 24 | Warp: OS command injection when opening terminal links from WSL |
| CVE-2026-48703 | WA warp warpdotdev | 7.8 | Jun 24 | Warp: Command Injection via Warp code search tool arguments |
| CVE-2026-48725 | WA warp warpdotdev | 8.1 | Jun 24 | Warp may allow terminal output to access the local clipboard through OSC 52 |