CVE-2026-48731

Name of the Vulnerable Software and Affected Versions Warp versions 0.2024.02.20.08.01.stable 01 through 0.2026.05.06.15.42.stable 01

Description A command injection issue exists in the Linux external editor launcher. The software expands freedesktop .desktop Exec templates for affected editor integrations and executes the resulting command through a shell. If a user opens an attacker-controlled local file path via an affected external editor or system-default editor route, shell syntax embedded within that path can be executed with the privileges of the local user.

Recommendations Update to version 0.2026.05.06.15.42.stable 01.