CVE-2026-48732

The record

Warp is an agentic development environment. From 0.2023.03.21.08.02.stable_00 until 0.2026.05.06.15.42.stable_01, Warp contains a command injection issue in the legacy SSH background command path. Warp used the remote working directory reported by the session when building helper commands for SSH-backed metadata collection. A remote host, repository, or directory name controlled by an attacker could cause that helper command to execute additional shell syntax on the remote host as the victim's authenticated SSH account. This vulnerability is fixed in 0.2026.05.06.15.42.stable_01.

Affected packages

Related vulnerabilities

• CVE-2026-96376 Improper Neutralization of Special Elements used in an OS Command ("OS Command… CWE-78
• CVE-2026-113732 virtualenv is a tool for creating isolated virtual python environments. CWE-78
• CVE-2026-113776 virtualenv is a tool for creating isolated virtual python environments. CWE-78
• CVE-2026-113726 virtualenv is a tool for creating isolated virtual python environments. CWE-78
• CVE-2026-113725 virtualenv is a tool for creating isolated virtual python environments. CWE-78
• CVE-2026-113722 virtualenv is a tool for creating isolated virtual python environments. CWE-78
• CVE-2026-112943 launch-editor allows users to open files with line numbers in editor from Node.js. CWE-78
• CVE-2026-112900 Pillow is a Python imaging library. CWE-78