CVE-2026-48704

Warp Markdown notebook links may open executable local files

Published Jun 24, 2026 CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed

Description

Warp is an agentic development environment. From 0.2023.10.24.08.03.stable_00 until 0.2026.05.06.15.42.stable_01, Warp may open executable local files through the operating system default file handler. A malicious Markdown document or project can contain a local-file link that appears as normal rendered content. If a user opens the Markdown in Warp and clicks the link, affected builds may route the resolved local file to a platform file opener instead of limiting the action to safe viewer/editor targets. This vulnerability is fixed in 0.2026.05.06.15.42.stable_01.

Analysis

Technical impact

Warp is an agentic development environment that, in versions 0.2023.10.24.08.03.stable_00 through 0.2026.05.06.15.42.stable_01, may open executable local files through the operating system default file handler when a user clicks a local‑file link in a rendered Markdown document; this flaw allows an attacker to run arbitrary code on the host machine by embedding a malicious local‑file reference in a Markdown file.

Affected Systems

The affected product is Warp developed by warpdotdev; versions from 0.2023.10.24.08.03.stable_00 up to and including 0.2026.05.06.15.42.stable_01 are vulnerable.

Risk and Exploitability

The CVSS score of 8.8 indicates high severity. No EPSS data is available and the vulnerability is not listed in KEV, so no widespread exploitation is reported. The likely attack vector is local: an attacker delivers a crafted Markdown file to a targeted user; upon opening and clicking the link, the system handler executes the referenced file. The flaw is a CWE‑20 input validation error that lets the application forward a user‑supplied path to the OS.

Affected Products

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

warpdotdev

warp

affected

Version	Status	Constraints
`>= 0.2023.10.24.08.03.stable_00, < 0.2026.05.13.09.15.stable_01`	affected	—

No data.

Vendor Product Versions

Warpdotdev

Warp

Version	Status	Scheme	Platform
`[0.2023.10.24.08.03.stable_00,0.2026.05.13.09.15.stable_01)`	affected	generic	—

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

Upgrade Warp to version 0.2026.05.06.15.42.stable_01 or later to apply the fix for local‑file link handling.
If the upgraded version provides configurable settings, disable or restrict the use of the system default file opener for Markdown links so that only safe viewer or editor targets are allowed.
Until a patch or configuration change is applied, avoid opening untrusted Markdown documents that contain local‑file links or remove such links before viewing.

Generated by OpenCVE AI on June 24, 2026 at 19:48 UTC.

Tracking

Advisories

No advisories available

Metrics

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploit prediction score: < 1% (0.442% probability within 30 days)

Exploitation none

Automatable no

Technical Impact total

References

Link	Providers
https://github.com/warpdotdev/warp/commit/7f0c4dd2322198f1b39890f8e6bcdc606c6a3c74
https://github.com/warpdotdev/warp/security/advisories/GHSA-589x-4mxh-jcrf

History

Jun 26, 2026 10:45 AM First appearance in the feed. Affected vendors updated View changes

Type	Values Removed	Values Added
First Time appeared		Warpdotdev Warpdotdev warp
Vendors & Products		Warpdotdev Warpdotdev warp

Jun 24, 2026 7:30 PM Scoring metrics updated View changes

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Jun 24, 2026 6:00 PM Description updated. Title updated. Weaknesses updated. Added references. Scoring metrics updated View changes

Type	Values Removed	Values Added
Description		Warp is an agentic development environment. From 0.2023.10.24.08.03.stable_00 until 0.2026.05.06.15.42.stable_01, Warp may open executable local files through the operating system default file handler. A malicious Markdown document or project can contain a local-file link that appears as normal rendered content. If a user opens the Markdown in Warp and clicks the link, affected builds may route the resolved local file to a platform file opener instead of limiting the action to safe viewer/editor targets. This vulnerability is fixed in 0.2026.05.06.15.42.stable_01.
Title		Warp Markdown notebook links may open executable local files
Weaknesses		CWE-20
References		https://github.com/warpdotdev/warp/commit/7f0c4dd2322198f1b39890f8e6bcdc606c6a3c74 https://github.com/warpdotdev/warp/security/advisories/GHSA-589x-4mxh-jcrf
Metrics		cvssV3_1 `{'score': 8.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'}`