CVE-2026-54699— Warp: OS command injection when opening terminal links from WSL
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-54699
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Warp: OS command injection when opening terminal links from WSL
Source: NVD (National Vulnerability Database)
Vulnerability Description
Warp is an agentic development environment. From 0.2024.03.12.08.02.stable_01 until 0.2026.05.06.15.42.stable_01, Warp contains an OS command injection vulnerability in the WSL URL-opening fallback. When Warp is running under WSL and cannot open a URL through wslview, it falls back to a Windows command processor path. A URL controlled through terminal output can reach that fallback when the user opens the link. This vulnerability is fixed in 0.2026.05.06.15.42.stable_01.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
Source: NVD (National Vulnerability Database)
Vulnerability Type
OS命令中使用的特殊元素转义处理不恰当(OS命令注入)
Source: NVD (National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| warpdotdev | warp | >= 0.2024.03.12.08.02.stable_01, < 0.2026.05.13.09.15.stable_01 | - |
II. Public POCs for CVE-2026-54699
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-54699
请登录查看更多情报信息。
Other References for CVE-2026-54699 (2)
Same Patch Batch · warpdotdev · 2026-06-24 · 10 CVEs total
| CVE-2026-48704 | 8.8 HIGH | Warp Markdown notebook links may open executable local files |
| CVE-2026-48732 | 8.8 HIGH | Warp: Remote SSH cwd can lead to unauthorized remote command execution |
| CVE-2026-48720 | 8.8 HIGH | Warp: SSH remote output can lead to local file overwrite and persistence |
| CVE-2026-48721 | 8.6 HIGH | Warp: Env-var prefixes can lead to denylisted command autoexecution |
| CVE-2026-48725 | 8.1 HIGH | Warp may allow terminal output to access the local clipboard through OSC 52 |
| CVE-2026-48719 | 8.0 HIGH | Warp branch selector command injection via Git branch names |
| CVE-2026-48731 | 7.8 HIGH | Warp: Linux external editor command injection |
| CVE-2026-48703 | 7.8 HIGH | Warp: Command Injection via Warp code search tool arguments |
| CVE-2026-54686 | 4.3 MEDIUM | Warp: DCS lifecycle hook spoofing can alter terminal session metadata |
IV. Related Vulnerabilities
Same product: warp
- CVE-2026-48704
Warp Markdown notebook links may open executable local files - CVE-2026-48719
Warp branch selector command injection via Git branch names - CVE-2026-48720
Warp: SSH remote output can lead to local file overwrite and - CVE-2026-48721
Warp: Env-var prefixes can lead to denylisted command autoex - CVE-2026-48731
Warp: Linux external editor command injection
Same vendor: warpdotdev
- CVE-2026-48704
Warp Markdown notebook links may open executable local files - CVE-2026-48719
Warp branch selector command injection via Git branch names - CVE-2026-48720
Warp: SSH remote output can lead to local file overwrite and - CVE-2026-48721
Warp: Env-var prefixes can lead to denylisted command autoex - CVE-2026-48731
Warp: Linux external editor command injection
Same weakness: CWE-78
- CVE-2026-55441
mise: Arbitrary command execution via task-include files in - CVE-2026-55448
mise: Local credential_command executes untrusted config - CVE-2026-54636
Dokku: OS Command Injection via app.json managed Cron - CVE-2026-45408
Dokku: OS Command Injection via App Name in Git Pre-Receive - CVE-2026-40711
Dell Container Storage Modules v2.16.0 OS命令注入漏洞
V. Comments for CVE-2026-54699
No comments yet