Executive brief
Warp, a modern terminal and development environment, contains a flaw in how it handles links within Markdown documents. An attacker could trick a user into clicking a malicious link that executes a local file on the user's computer instead of simply opening it for viewing. If successful, this could allow an attacker to run unauthorized commands or software with the same permissions as the user, potentially leading to a full system compromise.
Technical details
A vulnerability in Warp's Markdown link handling allows for potential arbitrary code execution. The application fails to properly validate local-file links, routing them to the operating system's default file handler instead of restricting them to safe internal viewers or editors. An attacker can craft a Markdown document containing a link to a local executable file; if a user clicks this link, the OS may execute the file. Exploitation requires the attacker to place a malicious file on the victim's local system and convince the user to click a link within a Markdown file opened in Warp. The issue is confirmed on macOS and Windows, while Linux impact varies by desktop environment. A fix was introduced in version 0.2026.05.06.15.42.stable_01 which ensures untrusted file types are revealed in the file manager rather than executed.
Affected products
- warpdotdev Warp >= 0.2023.10.24.08.03.stable_00, < 0.2026.05.06.15.42.stable_01
Timeline
- 2026-06-09: advisory: GitHub Security Advisory GHSA-589x-4mxh-jcrf published
- 2026-06-24: disclosed: CVE-2026-48704 published to NVD
- 2026-05-06: patched: Fixed in version 0.2026.05.06.15.42.stable_01