Skip to content
Warpdotdev Warp vulnerabilities
-
fatpipe warp
Warp Markdown notebook links may open executable local files
CVE-2026-48704
8.8 High
-
fatpipe warp
Warp branch selector command injection via Git branch names
CVE-2026-48719
8.0 High
-
fatpipe warp
Warp: SSH remote output can lead to local file overwrite and persistence
CVE-2026-48720
8.8 High
-
fatpipe warp
Warp: Env-var prefixes can lead to denylisted command autoexecution
CVE-2026-48721
8.6 High
-
fatpipe warp
Warp: Linux external editor command injection
CVE-2026-48731
7.8 High
-
fatpipe warp
Warp: Remote SSH cwd can lead to unauthorized remote command execution
CVE-2026-48732
Public exploit
8.8 High
-
fatpipe warp
Warp: DCS lifecycle hook spoofing can alter terminal session metadata
CVE-2026-54686
Public exploit
4.3 Medium
-
fatpipe warp
Warp: OS command injection when opening terminal links from WSL
CVE-2026-54699
7.7 High
-
fatpipe warp
Warp: Command Injection via Warp code search tool arguments
CVE-2026-48703
7.8 High
-
fatpipe warp
Warp may allow terminal output to access the local clipboard through OSC 52
CVE-2026-48725
8.1 High