Skip to content
OpenAdvisories

Vendor

warpdotdev

10 known vulnerabilities.

Products

warp 10
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.3
    CVE-2026-54686 Public exploit

    Warp: DCS lifecycle hook spoofing can alter terminal session metadata

    Warp is an agentic development environment. From 0.2021.04.25.23.05.stable_00 until 0.2026.05.06.15.42.stable_01, Warp accepted certain state-mutating terminal lifecycle hooks from the PTY stream without verifying that the hooks were emitted by Warp's shell i…

    warpdotdev warp