warpdotdev warp

• CVE-2026-48704 High 8.8 Warp Markdown notebook links may open executable local files 0.4%
• CVE-2026-48719 High 8.0 Warp branch selector command injection via Git branch names 1.3%
• CVE-2026-48720 High 8.8 Warp: SSH remote output can lead to local file overwrite and persistence 0.4%
• CVE-2026-48721 High 8.6 Warp: Env-var prefixes can lead to denylisted command autoexecution 0.2%
• CVE-2026-48731 High 7.8 Warp: Linux external editor command injection 0.9%
• CVE-2026-48732 High 8.8 Warp: Remote SSH cwd can lead to unauthorized remote command execution 1.4%
• CVE-2026-54686 Medium 4.3 Warp: DCS lifecycle hook spoofing can alter terminal session metadata 0.4%
• CVE-2026-54699 High 7.7 Warp: OS command injection when opening terminal links from WSL 0.7%
• CVE-2026-48703 High 7.8 Warp: Command Injection via Warp code search tool arguments 0.3%
• CVE-2026-48725 High 8.1 Warp may allow terminal output to access the local clipboard through OSC 52 0.4%