Warp

This hub aggregates every CVE we track for Warp, a product in the oss libraries space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Warp.

• CVE-2026-90823FatPipe MPVPN, WARP, and IPVPN appliances running the end-of-life firmware version 10.1.2r60p100 contain a stack-based buffer overflow in /usr/sbin/auth_user_pass. An unauthenticated remote attacke...9.8Sep 17, 2026
• CVE-2026-90822FatPipe MPVPN, WARP, and IPVPN appliances running the end-of-life firmware version 10.1.2r60p100 contain an OS command injection vulnerability in the xtremed daemon. An unauthenticated remote attac...9.8Sep 17, 2026
• CVE-2026-48704Warp Markdown notebook links may open executable local files8.8Jun 24, 2026
• CVE-2026-48719Warp branch selector command injection via Git branch names8.0Jun 24, 2026
• CVE-2026-48720Warp: SSH remote output can lead to local file overwrite and persistence8.8Jun 24, 2026
• CVE-2026-48721Warp: Env-var prefixes can lead to denylisted command autoexecution8.6Jun 24, 2026
• CVE-2026-48731Warp: Linux external editor command injection7.8Jun 24, 2026
• CVE-2026-48732Warp: Remote SSH cwd can lead to unauthorized remote command execution8.8Jun 24, 2026
• CVE-2026-54686Warp: DCS lifecycle hook spoofing can alter terminal session metadata4.3Jun 24, 2026
• CVE-2026-54699Warp: OS command injection when opening terminal links from WSL7.7Jun 24, 2026
• CVE-2026-48703Warp: Command Injection via Warp code search tool arguments7.8Jun 24, 2026
• CVE-2026-48725Warp may allow terminal output to access the local clipboard through OSC 528.1Jun 24, 2026
• CVE-2025-0651File symlink abuse might lead to deleting files belonging to SYSTEM user7.1Jan 22, 2025
• CVE-2023-3747Insufficient Validation on Override Codes for Always-Enabled WARP Mode5.5Sep 7, 2023
• CVE-2023-0654Spoofing User's Activity Loads in WARP Mobile Client (Android)3.9Aug 29, 2023