# CVE-2026-48732: Warp command injection in legacy SSH background command path

Source: https://junglewise.ai/threats/cve-2026-48732-warp-command-injection-in-legacy-ssh-background-command-path  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-06-24. Updated: 2026-06-24  
License: CC BY 4.0 with a link back

CVE-2026-48732 · Severity: high · CVSS 8.8 · Published 2026-06-24

Warp, an AI-powered terminal and development environment, contains a security flaw in how it handles remote SSH connections. An attacker could trick a user into navigating to a malicious directory or repository that triggers the execution of unauthorized commands on the user's remote server. This could allow an attacker to view, modify, or delete sensitive files and disrupt operations using the victim's own account permissions.

## Quick answers

**Is CVE-2026-48732 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-48732 being exploited in the wild.

**How severe is CVE-2026-48732?** High severity, with a CVSS score of 8.8, published 24 June 2026.

**Which products and versions are affected?** warpdotdev Warp >= 0.2023.03.21.08.02.stable_00, < 0.2026.05.06.15.42.stable_01.

**Is there a fix for CVE-2026-48732?** A patch was published on 2026-05-05: Initial fix commit authored Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-48732 attacked?** It is attacked over the network, in a network appliance.

**Am I affected by CVE-2026-48732?** Check whether anything you run is named in the advisory. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A command injection vulnerability exists in Warp's legacy SSH background command path due to improper neutralization of special elements (CWE-78). The application fails to escape single quotes when building helper commands for SSH-backed metadata collection, specifically when using the remote working directory (cwd) or history file paths reported by the session. An attacker can craft a malicious directory name, repository name, or host string containing shell metacharacters. When a victim using an affected version of Warp (between 0.2023.03.21.08.02.stable_00 and 0.2026.05.06.15.42.stable_01) interacts with these attacker-controlled strings during an SSH session, the terminal executes the injected syntax on the remote host with the privileges of the authenticated SSH user. The issue is resolved in version 0.2026.05.06.15.42.stable_01 by implementing proper shell escaping for single quotes.

## Affected products

- warpdotdev Warp >= 0.2023.03.21.08.02.stable_00, < 0.2026.05.06.15.42.stable_01

## Timeline

- 2026-05-05: patched: Initial fix commit authored
- 2026-06-09: advisory: GitHub security advisory published
- 2026-06-24: disclosed: CVE published to NVD

## References

- [https://github.com/warpdotdev/warp/commit/88c344e2de662a935f0ef0896458494ef2413add](https://github.com/warpdotdev/warp/commit/88c344e2de662a935f0ef0896458494ef2413add)
- [https://github.com/warpdotdev/warp/security/advisories/GHSA-qqpc-wvvw-4269](https://github.com/warpdotdev/warp/security/advisories/GHSA-qqpc-wvvw-4269)