CVE-2026-48731— Warp: Linux external editor command injection
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-48731
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Warp: Linux external editor command injection
Source: NVD (National Vulnerability Database)
Vulnerability Description
Warp is an agentic development environment. From 0.2024.02.20.08.01.stable_01 until 0.2026.05.06.15.42.stable_01, Warp contains a command injection issue in the Linux external editor launcher. Warp expanded freedesktop .desktop Exec templates for affected editor integrations and executed the expanded command through a shell. A user who opens an attacker-controlled local file path through an affected external editor or system-default editor route can cause shell syntax embedded in that path to execute as the local user. This vulnerability is fixed in 0.2026.05.06.15.42.stable_01.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Source: NVD (National Vulnerability Database)
Vulnerability Type
OS命令中使用的特殊元素转义处理不恰当(OS命令注入)
Source: NVD (National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| warpdotdev | warp | >= 0.2024.02.20.08.01.stable_01, < 0.2026.05.13.09.15.stable_01 | - |
II. Public POCs for CVE-2026-48731
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-48731
请登录查看更多情报信息。
Other References for CVE-2026-48731 (1)
Same Patch Batch · warpdotdev · 2026-06-24 · 10 CVEs total
| CVE-2026-48704 | 8.8 HIGH | Warp Markdown notebook links may open executable local files |
| CVE-2026-48732 | 8.8 HIGH | Warp: Remote SSH cwd can lead to unauthorized remote command execution |
| CVE-2026-48720 | 8.8 HIGH | Warp: SSH remote output can lead to local file overwrite and persistence |
| CVE-2026-48721 | 8.6 HIGH | Warp: Env-var prefixes can lead to denylisted command autoexecution |
| CVE-2026-48725 | 8.1 HIGH | Warp may allow terminal output to access the local clipboard through OSC 52 |
| CVE-2026-48719 | 8.0 HIGH | Warp branch selector command injection via Git branch names |
| CVE-2026-48703 | 7.8 HIGH | Warp: Command Injection via Warp code search tool arguments |
| CVE-2026-54699 | 7.7 HIGH | Warp: OS command injection when opening terminal links from WSL |
| CVE-2026-54686 | 4.3 MEDIUM | Warp: DCS lifecycle hook spoofing can alter terminal session metadata |
IV. Related Vulnerabilities
Same product: warp
- CVE-2026-48704
Warp Markdown notebook links may open executable local files - CVE-2026-48719
Warp branch selector command injection via Git branch names - CVE-2026-48720
Warp: SSH remote output can lead to local file overwrite and - CVE-2026-48721
Warp: Env-var prefixes can lead to denylisted command autoex - CVE-2026-48732
Warp: Remote SSH cwd can lead to unauthorized remote command
Same vendor: warpdotdev
- CVE-2026-48704
Warp Markdown notebook links may open executable local files - CVE-2026-48719
Warp branch selector command injection via Git branch names - CVE-2026-48720
Warp: SSH remote output can lead to local file overwrite and - CVE-2026-48721
Warp: Env-var prefixes can lead to denylisted command autoex - CVE-2026-48732
Warp: Remote SSH cwd can lead to unauthorized remote command
Same weakness: CWE-78
- CVE-2026-55441
mise: Arbitrary command execution via task-include files in - CVE-2026-55448
mise: Local credential_command executes untrusted config - CVE-2026-54636
Dokku: OS Command Injection via app.json managed Cron - CVE-2026-45408
Dokku: OS Command Injection via App Name in Git Pre-Receive - CVE-2026-40711
Dell Container Storage Modules v2.16.0 OS命令注入漏洞
V. Comments for CVE-2026-48731
No comments yet