Advisories · Technology
warp.
Every CVE that names warp among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.8 High
Warp Markdown notebook links may open executable local files
- warp
- CWE-20
- CVSS 8.0 High
Warp branch selector command injection via Git branch names
- warp
- Command injection
- CVSS 8.8 High
Warp: SSH remote output can lead to local file overwrite and persistence
- warp
- Path traversal
- CWE-20
- CVSS 8.6 High
Warp: Env-var prefixes can lead to denylisted command autoexecution
- warp
- CWE-180
- CWE-693
- CVSS 7.8 High
Warp: Linux external editor command injection
- warp
- Command injection
- CVSS 8.8 High
Warp: Remote SSH cwd can lead to unauthorized remote command execution
- warp
- Command injection
- CVSS 4.3 Medium
Warp: DCS lifecycle hook spoofing can alter terminal session metadata
- warp
- Command injection
- CVSS 7.7 High
Warp: OS command injection when opening terminal links from WSL
- warp
- Command injection
- CWE-116
- CVSS 7.8 High
Warp: Command Injection via Warp code search tool arguments
- warp
- Command injection
- CVSS 8.1 High
Warp may allow terminal output to access the local clipboard through OSC 52
- warp
- Broken access control