CVE-2026-48703: Warp command injection in Agent code search tools

CVE-2026-48703 · Severity: high · CVSS 7.8 · Published 2026-06-24

Warp is a modern terminal and development environment that uses AI agents to assist with coding tasks. A security flaw in its code search tools allows an attacker to trick the AI into running unauthorized commands on a user's computer. If a user interacts with malicious project files or content, the attacker could gain full control over the terminal session, potentially leading to data theft or system compromise.

Quick answers

Is CVE-2026-48703 exploited in the wild?
No. Junglewise Threat Intelligence has no report of CVE-2026-48703 being exploited in the wild.
How severe is CVE-2026-48703?
High severity, with a CVSS score of 7.8, published 24 June 2026.
Which products and versions are affected?
warpdotdev Warp >= 0.2025.04.09.08.11.stable_00, < 0.2026.05.06.15.42.stable_01.
Is there a fix for CVE-2026-48703?
A patch was published on 2026-06-09: Advisory published and fix released in version 0.2026.05.06.15.42.stable_01 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-48703 attacked?
It is attacked with local access, in a network appliance.
Am I affected by CVE-2026-48703?
Check whether anything you run is named in the advisory. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A command injection vulnerability (CWE-78) exists in the Warp Agent's Grep and FileGlob actions. While these actions are classified as read-only search operations, their implementation fails to properly neutralize special characters when building shell command strings from Agent-controlled inputs like search text, paths, and glob patterns. An attacker can exploit this by influencing the Agent's context—for example, through prompt injection in local project files—to execute arbitrary shell syntax in the active terminal session. This bypasses the standard command execution approval workflow. The issue is resolved in version 0.2026.05.06.15.42.stable_01 by properly quoting search arguments and patterns.

Affected products

  • warpdotdev Warp >= 0.2025.04.09.08.11.stable_00, < 0.2026.05.06.15.42.stable_01

Timeline

  • 2026-05-05: other: Fixing commit authored
  • 2026-06-09: patched: Advisory published and fix released in version 0.2026.05.06.15.42.stable_01
  • 2026-06-24: advisory: NVD published CVE-2026-48703

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.