Skip to content
Heist/ feed
Back to feed
High

Warp: Linux external editor command injection

Type: advisorySources: OSV

Warp is an agentic development environment. From 0.2024.02.20.08.01.stable_01 until 0.2026.05.06.15.42.stable_01, Warp contains a command injection issue in the Linux external editor launcher. Warp expanded freedesktop .desktop Exec templates for affected editor integrations and executed the expanded command through a shell. A user who opens an attacker-controlled local file path through an affected external editor or system-default editor route can cause shell syntax embedded in that path to execute as the local user. This vulnerability is fixed in 0.2026.05.06.15.42.stable_01.

Products
Not specified
Affected versions
Not specified
Fixed versions
Not specified
CVEs
CVE-2026-48731
Confirmed fixed CVEs
Not specified
Updated in this feed
3 Nov 2026, 15:27 UTC · Revision 1

Source evidence

Warp: Linux external editor command injection

core-osv · Original source

Published 24 Jun 2026, 17:30 UTC

Warp is an agentic development environment. From 0.2024.02.20.08.01.stable_01 until 0.2026.05.06.15.42.stable_01, Warp contains a command injection issue in the Linux external editor launcher. Warp expanded freedesktop .desktop Exec templates for affected editor integrations and executed the expanded command through a shell. A user who opens an attacker-controlled local file path through an affected external editor or system-default editor route can cause shell syntax embedded in that path to execute as the local user. This vulnerability is fixed in 0.2026.05.06.15.42.stable_01.

osv:CVE-2026-48731
Complete source record
{
  "id": "6cd42758073debf45c64808d541ed221f15bed98f8bfbff8c1dff9d6e5dd5b2b",
  "url": "https://osv.dev/vulnerability/CVE-2026-48731",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "Warp: Linux external editor command injection",
    "summary": "Warp is an agentic development environment. From 0.2024.02.20.08.01.stable_01 until 0.2026.05.06.15.42.stable_01, Warp contains a command injection issue in the Linux external editor launcher. Warp expanded freedesktop .desktop Exec templates for affected editor integrations and executed the expanded command through a shell. A user who opens an attacker-controlled local file path through an affected external editor or system-default editor route can cause shell syntax embedded in that path to execute as the local user. This vulnerability is fixed in 0.2026.05.06.15.42.stable_01.",
    "evidence": "osv:CVE-2026-48731",
    "products": [],
    "severity": "high",
    "structured": {
      "id": "CVE-2026-48731",
      "aliases": [
        "CVE-2026-48731",
        "GHSA-7xgc-mhc8-g7wc"
      ],
      "metrics": [
        {
          "type": "CVSS_V3",
          "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
        }
      ],
      "affected": [
        {
          "ranges": [
            {
              "repo": "https://github.com/warpdotdev/warp",
              "type": "GIT",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "861dacea2683f2fe263c3c3a1381c3cbb2b66809"
                }
              ],
              "database_specific": {
                "extracted_events": [
                  {
                    "range": [
                      {
                        "fixed": "861dacea2683f2fe263c3c3a1381c3cbb2b66809"
                      }
                    ],
                    "source": "REFERENCES_COMMIT"
                  }
                ]
              }
            }
          ],
          "versions": [
            "v0.2026.06.03.09.49.stable_00",
            "v0.2026.06.03.09.49.preview_00",
            "v0.2026.06.03.09.49.dev_00",
            "v0.2026.06.09.09.21.dev_00",
            "v0.2026.06.08.09.48.dev_00",
            "v0.2026.06.07.09.13.dev_00",
            "v0.2026.06.06.09.03.dev_00",
            "v0.2026.06.05.09.22.dev_00",
            "v0.2026.06.04.09.31.dev_00",
            "v0.2026.06.02.09.40.dev_00",
            "v0.2026.06.01.10.01.dev_00",
            "v0.2026.05.31.09.13.dev_00",
            "v0.2026.05.30.08.57.dev_00",
            "v0.2026.05.29.09.24.dev_00",
            "v0.2026.05.27.09.22.stable_00",
            "v0.2026.05.27.09.22.preview_00",
            "v0.2026.05.27.09.22.dev_00",
            "v0.2026.05.28.09.29.dev_00",
            "v0.2026.05.26.09.25.dev_00",
            "v0.2026.05.25.09.34.dev_00",
            "v0.2026.05.24.09.01.dev_00",
            "v0.2026.05.23.08.51.dev_00",
            "v0.2026.05.22.09.18.dev_00",
            "v0.2026.05.21.09.21.dev_00",
            "v0.2026.05.20.09.21.stable_00",
            "v0.2026.05.20.09.21.preview_00",
            "v0.2026.05.20.09.21.dev_00",
            "v0.2026.05.19.09.24.dev_00",
            "v0.2026.05.18.09.26.dev_00",
            "v0.2026.05.17.08.52.dev_00",
            "v0.2026.05.16.08.43.dev_00",
            "v0.2026.05.15.09.17.dev_00",
            "repo-sync/watermark/private-to-public",
            "v0.2026.05.14.09.08.dev_00",
            "v0.2026.05.13.09.15.preview_00",
            "v0.2026.05.13.09.15.dev_00",
            "v0.2026.05.13.09.14.stable_00",
            "v0.2026.05.12.09.09.dev_00",
            "v0.2026.05.06.09.13.preview_00",
            "v0.2026.05.06.09.12.stable_00",
            "v0.2026.05.06.09.12.dev_00",
            "v0.2026.05.10.08.45.dev_00",
            "v0.2026.05.11.09.24.dev_00",
            "v0.2026.05.09.08.42.dev_00",
            "v0.2026.05.08.08.43.dev_00",
            "v0.2026.05.07.09.05.dev_00",
            "v0.2026.05.05.08.57.dev_00",
            "v0.2026.05.04.09.01.dev_00",
            "v0.2026.05.03.08.43.dev_00",
            "v0.2026.05.02.08.40.dev_00",
            "v0.2026.05.01.08.50.dev_00",
            "v0.2026.04.30.08.57.dev_00",
            "v0.2026.04.29.08.57.dev_00",
            "v0.2026.04.29.08.56.stable_00",
            "v0.2026.04.29.08.56.preview_00"
          ],
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-48731.json"
          }
        }
      ],
      "modified": "2026-10-28T02:30:29.820295759Z",
      "provider": "osv",
      "references": [
        "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/48xxx/CVE-2026-48731.json",
        "https://github.com/warpdotdev/warp/security/advisories/GHSA-7xgc-mhc8-g7wc",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-48731",
        "https://github.com/warpdotdev/warp/commit/861dacea2683f2fe263c3c3a1381c3cbb2b66809"
      ],
      "provider_metadata": {
        "cwe_ids": [
          "CWE-78"
        ],
        "cna_assigner": "GitHub_M",
        "unresolved_ranges": [
          {
            "extracted_events": [
              {
                "range": [
                  {
                    "introduced": ">= 0.2024.02.20.08.01.stable_01, < 0.2026.05.13.09.15.stable_01"
                  },
                  {
                    "last_affected": ">= 0.2024.02.20.08.01.stable_01, < 0.2026.05.13.09.15.stable_01"
                  }
                ],
                "source": "AFFECTED_FIELD",
                "strategy": "StandaloneSingleVersion"
              }
            ]
          },
          {
            "extracted_events": [
              {
                "range": [
                  {
                    "fixed": "0.2026.05.06.15.42.stable_01"
                  }
                ],
                "source": "DESCRIPTION"
              }
            ]
          }
        ],
        "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/48xxx/CVE-2026-48731.json"
      }
    },
    "related_cves": [
      {
        "value": "CVE-2026-48731",
        "evidence": "/id"
      }
    ],
    "security_relevant": true,
    "severity_evidence": "/severity/0/score"
  },
  "source_id": "core-osv",
  "document_id": 496818,
  "published_at": "2026-06-24T17:30:17.637+00:00"
}