Skip to content
OpenAdvisories

Vendor

warpdotdev

10 known vulnerabilities.

Products

warp 10
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2026-48732 Public exploit

    Warp: Remote SSH cwd can lead to unauthorized remote command execution

    Warp is an agentic development environment. From 0.2023.03.21.08.02.stable_00 until 0.2026.05.06.15.42.stable_01, Warp contains a command injection issue in the legacy SSH background command path. Warp used the remote working directory reported by the session…

    warpdotdev warp
  • Medium 4.3
    CVE-2026-54686 Public exploit

    Warp: DCS lifecycle hook spoofing can alter terminal session metadata

    Warp is an agentic development environment. From 0.2021.04.25.23.05.stable_00 until 0.2026.05.06.15.42.stable_01, Warp accepted certain state-mutating terminal lifecycle hooks from the PTY stream without verifying that the hooks were emitted by Warp's shell i…

    warpdotdev warp