# CVE-2026-48731: Warp command injection in Linux external editor launcher

Source: https://junglewise.ai/threats/cve-2026-48731-warp-command-injection-in-linux-external-editor-launcher  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-06-24. Updated: 2026-06-24  
License: CC BY 4.0 with a link back

CVE-2026-48731 · Severity: high · CVSS 7.8 · Published 2026-06-24

Warp is a modern terminal and development environment. A security flaw in its Linux version allows an attacker to execute malicious commands on a user's computer if the user is tricked into opening a specially crafted file path using an external text editor. This could lead to a full compromise of the user's local account and data.

## Quick answers

**Is CVE-2026-48731 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-48731 being exploited in the wild.

**How severe is CVE-2026-48731?** High severity, with a CVSS score of 7.8, published 24 June 2026.

**Which products and versions are affected?** warpdotdev Warp >= 0.2024.02.20.08.01.stable_01, < 0.2026.05.06.15.42.stable_01.

**Is there a fix for CVE-2026-48731?** A patch was published on 2026-05-05: Fixing commit authored Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-48731 attacked?** It is attacked with local access, in a network appliance.

**Am I affected by CVE-2026-48731?** Check whether anything you run is named in the advisory. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A command injection vulnerability exists in Warp for Linux within the 'EditorMetadata::build_command()' function. The application improperly expanded freedesktop .desktop Exec templates by concatenating file paths and URLs into a single string and passing it to 'sh -c' without adequate escaping. An attacker can exploit this by providing a local file path containing shell metacharacters (e.g., semicolons or backticks). If a user opens such a path through an affected external editor integration, the embedded shell syntax executes with the permissions of the local user. The fix involves tokenizing Exec strings into an argument vector and using direct process execution instead of a shell.

## Affected products

- warpdotdev Warp >= 0.2024.02.20.08.01.stable_01, < 0.2026.05.06.15.42.stable_01

## Timeline

- 2026-05-05: patched: Fixing commit authored
- 2026-06-09: advisory: GitHub Security Advisory published
- 2026-06-24: disclosed: NVD publication date

## References

- [https://github.com/warpdotdev/warp/commit/861dacea2683f2fe263c3c3a1381c3cbb2b66809](https://github.com/warpdotdev/warp/commit/861dacea2683f2fe263c3c3a1381c3cbb2b66809)
- [https://github.com/warpdotdev/warp/security/advisories/GHSA-7xgc-mhc8-g7wc](https://github.com/warpdotdev/warp/security/advisories/GHSA-7xgc-mhc8-g7wc)