CVE-2026-48719

Warp is an agentic development environment. From 0.2025.08.06.08.12.stable_00 until 0.2026.05.06.15.42.stable_01, Warp contains a command injection in the prompt branch selector. A user who can publish a branch to a Git repository opened in Warp can cause a crafted branch name to be interpreted by the victim's shell if the victim selects that branch from the UI. This vulnerability is fixed in 0.2026.05.06.15.42.stable_01.

CVSS v3 8.0 HIGH

8.0^/10

CVSS v3 : HIGH

Vector :

Exploitability : 2.1 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://github.com/warpdotdev/warp/commit/4295ec08d01912fe355351547e541277f29288cd
https://github.com/warpdotdev/warp/security/advisories/GHSA-hgvx-4xvm-39pw

Configurations

No configuration.

History

25 Oct 2026, 22:10

Type	Values Removed	Values Added
Summary		(es) Warp es un entorno de desarrollo agéntico. Desde 0.2025.08.06.08.12.stable_00 hasta 0.2026.05.06.15.42.stable_01, Warp contiene una inyección de comandos en el selector de ramas del prompt. Un usuario que puede publicar una rama en un repositorio Git abierto en Warp puede hacer que un nombre de rama manipulado sea interpretado por el shell de la víctima si la víctima selecciona esa rama desde la interfaz de usuario. Esta vulnerabilidad está corregida en 0.2026.05.06.15.42.stable_01.

Information

Published : 2026-06-24 18:17

Updated : 2026-10-25 22:10

NVD link : CVE-2026-48719

Mitre link : CVE-2026-48719

CVE.ORG link : CVE-2026-48719

JSON object : View

Products Affected

No product.

CWE

CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

{"id": "CVE-2026-48719", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-48719", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-06-24T19:03:06.614295Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.0, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.1}]}, "affected": [{"source": "security-advisories@github.com", "affectedData": [{"vendor": "warpdotdev", "product": "warp", "versions": [{"status": "affected", "version": ">= 0.2025.08.06.08.12.stable_00, < 0.2026.05.13.09.15.stable_01"}]}]}], "published": "2026-06-24T18:17:17.983", "references": [{"url": "https://github.com/warpdotdev/warp/commit/4295ec08d01912fe355351547e541277f29288cd", "source": "security-advisories@github.com"}, {"url": "https://github.com/warpdotdev/warp/security/advisories/GHSA-hgvx-4xvm-39pw", "source": "security-advisories@github.com"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-78"}]}], "descriptions": [{"lang": "en", "value": "Warp is an agentic development environment. From 0.2025.08.06.08.12.stable_00 until 0.2026.05.06.15.42.stable_01, Warp contains a command injection in the prompt branch selector. A user who can publish a branch to a Git repository opened in Warp can cause a crafted branch name to be interpreted by the victim's shell if the victim selects that branch from the UI. This vulnerability is fixed in 0.2026.05.06.15.42.stable_01."}, {"lang": "es", "value": "Warp es un entorno de desarrollo ag\u00e9ntico. Desde 0.2025.08.06.08.12.stable_00 hasta 0.2026.05.06.15.42.stable_01, Warp contiene una inyecci\u00f3n de comandos en el selector de ramas del prompt. Un usuario que puede publicar una rama en un repositorio Git abierto en Warp puede hacer que un nombre de rama manipulado sea interpretado por el shell de la v\u00edctima si la v\u00edctima selecciona esa rama desde la interfaz de usuario. Esta vulnerabilidad est\u00e1 corregida en 0.2026.05.06.15.42.stable_01."}], "lastModified": "2026-10-25T22:10:00.150", "sourceIdentifier": "security-advisories@github.com"}