# CVE-2026-48704: Warp arbitrary code execution via Markdown link handling

Source: https://junglewise.ai/threats/cve-2026-48704-warp-arbitrary-code-execution-via-markdown-link-handling  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-06-24. Updated: 2026-06-24  
License: CC BY 4.0 with a link back

CVE-2026-48704 · Severity: high · CVSS 8.8 · Published 2026-06-24

Warp, a modern terminal and development environment, contains a flaw in how it handles links within Markdown documents. An attacker could trick a user into clicking a malicious link that executes a local file on the user's computer instead of simply opening it for viewing. If successful, this could allow an attacker to run unauthorized commands or software with the same permissions as the user, potentially leading to a full system compromise.

## Quick answers

**Is CVE-2026-48704 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-48704 being exploited in the wild.

**How severe is CVE-2026-48704?** High severity, with a CVSS score of 8.8, published 24 June 2026.

**Which products and versions are affected?** warpdotdev Warp >= 0.2023.10.24.08.03.stable_00, < 0.2026.05.06.15.42.stable_01.

**Is there a fix for CVE-2026-48704?** A patch was published on 2026-05-06: Fixed in version 0.2026.05.06.15.42.stable_01 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-48704 attacked?** It is attacked over the network, in a network appliance.

**Am I affected by CVE-2026-48704?** Check whether anything you run is named in the advisory. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A vulnerability in Warp's Markdown link handling allows for potential arbitrary code execution. The application fails to properly validate local-file links, routing them to the operating system's default file handler instead of restricting them to safe internal viewers or editors. An attacker can craft a Markdown document containing a link to a local executable file; if a user clicks this link, the OS may execute the file. Exploitation requires the attacker to place a malicious file on the victim's local system and convince the user to click a link within a Markdown file opened in Warp. The issue is confirmed on macOS and Windows, while Linux impact varies by desktop environment. A fix was introduced in version 0.2026.05.06.15.42.stable_01 which ensures untrusted file types are revealed in the file manager rather than executed.

## Affected products

- warpdotdev Warp >= 0.2023.10.24.08.03.stable_00, < 0.2026.05.06.15.42.stable_01

## Timeline

- 2026-06-09: advisory: GitHub Security Advisory GHSA-589x-4mxh-jcrf published
- 2026-06-24: disclosed: CVE-2026-48704 published to NVD
- 2026-05-06: patched: Fixed in version 0.2026.05.06.15.42.stable_01

## References

- [https://github.com/warpdotdev/warp/commit/7f0c4dd2322198f1b39890f8e6bcdc606c6a3c74](https://github.com/warpdotdev/warp/commit/7f0c4dd2322198f1b39890f8e6bcdc606c6a3c74)
- [https://github.com/warpdotdev/warp/security/advisories/GHSA-589x-4mxh-jcrf](https://github.com/warpdotdev/warp/security/advisories/GHSA-589x-4mxh-jcrf)