Warp branch selector command injection via Git branch names
Priority MEDIUM 40CWE-78Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- Required
- Attack complexity
- Low
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-78.
Summary
Warp is an agentic development environment. From 0.2025.08.06.08.12.stable_00 until 0.2026.05.06.15.42.stable_01, Warp contains a command injection in the prompt branch selector. A user who can publish a branch to a Git repository opened in Warp can cause a crafted branch name to be interpreted by the victim's shell if the victim selects that branch from the UI. This vulnerability is fixed in 0.2026.05.06.15.42.stable_01.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.0132 71st percentileScored 2026-11-07
Fix Fixed warp (warpdotdev): 0.2026.05.13.09.15.stable_01
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| warpdotdev | warp | 0.2025.08.06.08.12.stable_00 to before 0.2026.05.13.09.15.stable_01 | 0.2026.05.13.09.15.stable_01 | Patch available | CNA |
- warp Vendorwarpdotdev Affected 0.2025.08.06.08.12.stable_00 to before 0.2026.05.13.09.15.stable_01 Fixed in 0.2026.05.13.09.15.stable_01 Patch available CNA
Remediation
- Fix · CNA warp (warpdotdev) Fixed in 0.2026.05.13.09.15.stable_01
Timeline
- 2026-10-02 Threatist record created from CVE-2026-48719
References
More warpdotdev vulnerabilities
- TI-2026-36008 Warp: Remote SSH cwd can lead to unauthorized remote command execution CVSS 3.1HIGH 8.8
- TI-2026-36000 Warp: SSH remote output can lead to local file overwrite and persistence CVSS 3.1HIGH 8.8
- TI-2026-35986 Warp Markdown notebook links may open executable local files CVSS 3.1HIGH 8.8
- TI-2026-36001 Warp: Env-var prefixes can lead to denylisted command autoexecution CVSS 3.1HIGH 8.6
- TI-2026-36007 Warp: Linux external editor command injection CVSS 3.1HIGH 7.8
- TI-2026-39519 Warp: OS command injection when opening terminal links from WSL CVSS 3.1HIGH 7.7
Sources
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences