CVE-2026-48703

Name of the Vulnerable Software and Affected Versions Warp versions 0.2025.04.09.08.11.stable 00 through 0.2026.05.06.15.42.stable 00

Description Warp contains a command execution policy bypass within its Agent code search tools. The Grep and FileGlob actions, which are authorized as read or search operations, build shell command strings using Agent-controlled inputs such as search text, paths, and glob patterns. These strings are then executed in the active terminal session, allowing for command injection.

Recommendations Update to version 0.2026.05.06.15.42.stable 01.