What’s Vulnerable › Vulnerabilities

CVE-2026-48721: Warp: Env-var prefixes can lead to denylisted command autoexecution

• Severity: high (CVSS 8.6 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-06-24 · updated 2026-10-25
• Weakness: CWE-180

Description

Warp is an agentic development environment. From 0.2025.10.08.08.12.stable_00 until 0.2026.05.06.15.42.stable_01, Warp contains a command execution permission-check bypass in the default unsandboxed CLI agent profile. The CLI profile is non-interactive and relies on a command denylist as a safety boundary for commands that should require confirmation. Because command strings were checked before canonicalizing leading environment-variable assignments, an attacker who can influence the agent's command output may cause denylisted commands to be treated as non-denylisted. This vulnerability is fixed in 0.2026.05.06.15.42.stable_01.

Affected products

• warpdotdev warp: from 0.2025.10.08.08.12.stable_00, < 0.2026.05.13.09.15.stable_01

References

• https://github.com/warpdotdev/warp/commit/0c1e243292c642d9a7748f80813b6fdfc0b31a9e
• https://github.com/warpdotdev/warp/security/advisories/GHSA-3839-h8jj-ph82

Get alerted when CVE-2026-48721 or the next vulnerability affects your stack