PT-2026-52029 · Warpdotdev · Warp

Publicado 2026-06-24 · Atualizado 2026-06-24 · CVE-2026-48725

Mitre

CVSS v3.1

8.1

Alta

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

Warp is an agentic development environment. From 0.2021.04.25.23.05.stable 00 until 0.2026.05.06.15.42.stable 01, Warp allows terminal output to request access to the local system clipboard. A malicious remote host, remote program, or other attacker-controlled terminal output source can trigger clipboard reads or writes without a separate confirmation step. This crosses the trust boundary between untrusted terminal output and the user's local desktop clipboard. This vulnerability is fixed in 0.2026.05.06.15.42.stable 01.

Correção

Incorrect Default Permissions

Enumeração de Fraquezas

CWE-276

Identificadores relacionados

CVE-2026-48725

Produtos afetados

Warp

Referências · 3

• https://github.com/warpdotdev/warp/security/advisories/GHSA-wgqj-4c26-7c4g · Nota
• https://github.com/warpdotdev/warp/commit/b1a41d0b1aba9f40db1e5ceb695183452a894003 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-48725 · Nota de Segurança