Vulnerabilidades en warpdotdev
10 resultadosAnálisis Vexday
O Warp registra 10 vulnerabilidades na base, todas publicadas nos últimos 90 dias, indicando exposição recente e concentrada. Nenhuma está sob ataque ativo conhecido (KEV) e não há críticas, mas a fraqueza dominante é injeção de comando (CWE-78), tipicamente de alto potencial exploratório. O padrão temporal sugere ciclo acelerado de descobertas que requer monitoramento próximo.
CVE-2026-48732HIGHWarp: Remote SSH cwd can lead to unauthorized remote command executionEPSS 1.0%CVE-2026-48719HIGHWarp branch selector command injection via Git branch namesEPSS 0.9%CVE-2026-48731HIGHWarp: Linux external editor command injectionEPSS 0.5%CVE-2026-54699HIGHWarp: OS command injection when opening terminal links from WSLEPSS 0.4%CVE-2026-54686MEDIUMWarp: DCS lifecycle hook spoofing can alter terminal session metadataEPSS 0.3%CVE-2026-48704HIGHWarp Markdown notebook links may open executable local filesEPSS 0.3%CVE-2026-48720HIGHWarp: SSH remote output can lead to local file overwrite and persistenceEPSS 0.2%CVE-2026-48725HIGHWarp may allow terminal output to access the local clipboard through OSC 52EPSS 0.2%CVE-2026-48703HIGHWarp: Command Injection via Warp code search tool argumentsEPSS 0.2%CVE-2026-48721HIGHWarp: Env-var prefixes can lead to denylisted command autoexecutionEPSS 0.1%