warpdotdev

Records10All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high9CVSS 7.0–8.9

Exploited now

warpdotdev records in CISA KEV

No warpdotdev vulnerabilities are listed in CISA KEV.

Records

10 records

TI-2026-36008 CVE-2026-48732

Warp: Remote SSH cwd can lead to unauthorized remote command execution

MEDIUM 43

Warp is an agentic development environment.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01397 Published 2026-06-24 Fixed in 0.2026.05.13.09.15.stable_01 CWE-78

TI-2026-36000 CVE-2026-48720

Warp: SSH remote output can lead to local file overwrite and persistence

MEDIUM 40

Warp is an agentic development environment.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00442 Published 2026-06-24 Fixed in 0.2026.05.13.09.15.stable_01 CWE-20

TI-2026-35999 CVE-2026-48719

Warp branch selector command injection via Git branch names

MEDIUM 40

Warp is an agentic development environment.

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.0132 Published 2026-06-24 Fixed in 0.2026.05.13.09.15.stable_01 CWE-78

TI-2026-35986 CVE-2026-48704

Warp Markdown notebook links may open executable local files

MEDIUM 40

Warp is an agentic development environment.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00442 Published 2026-06-24 Fixed in 0.2026.05.13.09.15.stable_01 CWE-20

TI-2026-36001 CVE-2026-48721

Warp: Env-var prefixes can lead to denylisted command autoexecution

LOW 39

Warp is an agentic development environment.

CVSS 3.1HIGH 8.6 Local No auth User interaction EPSS 0.00221 Published 2026-06-24 Fixed in 0.2026.05.13.09.15.stable_01 CWE-180

TI-2026-36007 CVE-2026-48731

Warp: Linux external editor command injection

LOW 38

Warp is an agentic development environment.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00886 Published 2026-06-24 Fixed in 0.2026.05.13.09.15.stable_01 CWE-78

TI-2026-39519 CVE-2026-54699

Warp: OS command injection when opening terminal links from WSL

LOW 37

Warp is an agentic development environment.

CVSS 3.1HIGH 7.7 Local No auth User interaction EPSS 0.00741 Published 2026-06-24 Fixed in 0.2026.05.13.09.15.stable_01 CWE-116

TI-2026-36005 CVE-2026-48725

Warp may allow terminal output to access the local clipboard through OSC 52

LOW 37

Warp is an agentic development environment.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00378 Published 2026-06-24 Fixed in v0.2026.05.13.09.15.stable_01 CWE-276

TI-2026-35985 CVE-2026-48703

Warp: Command Injection via Warp code search tool arguments

LOW 36

Warp is an agentic development environment.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00252 Published 2026-06-24 Fixed in 0.2026.05.13.09.15.stable_01 CWE-78

TI-2026-39507 CVE-2026-54686

Warp: DCS lifecycle hook spoofing can alter terminal session metadata

LOW 20

Warp is an agentic development environment.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00404 Published 2026-06-24 Fixed in 0.2026.05.13.09.15.stable_01 CWE-78

Open these records in search →