CVE-2026-48719

{
  "id": "CVE-2026-48719",
  "sourceIdentifier": "[email protected]",
  "published": "2026-06-24T18:17:17.983",
  "lastModified": "2026-10-25T22:10:00.150",
  "vulnStatus": "Deferred",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Warp is an agentic development environment. From 0.2025.08.06.08.12.stable_00 until 0.2026.05.06.15.42.stable_01, Warp contains a command injection in the prompt branch selector. A user who can publish a branch to a Git repository opened in Warp can cause a crafted branch name to be interpreted by the victim's shell if the victim selects that branch from the UI. This vulnerability is fixed in 0.2026.05.06.15.42.stable_01."
    },
    {
      "lang": "es",
      "value": "Warp es un entorno de desarrollo agéntico. Desde 0.2025.08.06.08.12.stable_00 hasta 0.2026.05.06.15.42.stable_01, Warp contiene una inyección de comandos en el selector de ramas del prompt. Un usuario que puede publicar una rama en un repositorio Git abierto en Warp puede hacer que un nombre de rama manipulado sea interpretado por el shell de la víctima si la víctima selecciona esa rama desde la interfaz de usuario. Esta vulnerabilidad está corregida en 0.2026.05.06.15.42.stable_01."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "warpdotdev",
          "product": "warp",
          "versions": [
            {
              "version": ">= 0.2025.08.06.08.12.stable_00, < 0.2026.05.13.09.15.stable_01",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
          "baseScore": 8.0,
          "baseSeverity": "HIGH",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "LOW",
          "userInteraction": "REQUIRED",
          "scope": "UNCHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "availabilityImpact": "HIGH"
        },
        "exploitabilityScore": 2.1,
        "impactScore": 5.9
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-06-24T19:03:06.614295Z",
          "id": "CVE-2026-48719",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-78"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://github.com/warpdotdev/warp/commit/4295ec08d01912fe355351547e541277f29288cd",
      "source": "[email protected]"
    },
    {
      "url": "https://github.com/warpdotdev/warp/security/advisories/GHSA-hgvx-4xvm-39pw",
      "source": "[email protected]"
    }
  ]
}