PT-2026-52026 · Warp · Warp

CVE-2026-48704

·

Published

2026-06-24

·

Updated

2026-06-24

CVSS v3.1

8.8

High

VectorAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Warp versions 0.2023.10.24.08.03.stable 00 through 0.2026.05.06.15.42.stable 00
Description Warp may open executable local files using the operating system default file handler. A malicious Markdown document or project can include a local-file link that appears as normal rendered content. If a user clicks this link, the application may route the resolved local file to a platform file opener instead of restricting the action to safe viewer or editor targets.
Recommendations Update to version 0.2026.05.06.15.42.stable 01.

Exploit

Fix

RCE

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2026-48704
GHSA-589X-4MXH-JCRF

Affected Products

Warp