CVE-2026-48719

Warp branch selector command injection via Git branch names

Published Jun 24, 2026 CVSS 3.1 · 8 High EPSS 1.3% KEV · Not listed

Description

Warp is an agentic development environment. From 0.2025.08.06.08.12.stable_00 until 0.2026.05.06.15.42.stable_01, Warp contains a command injection in the prompt branch selector. A user who can publish a branch to a Git repository opened in Warp can cause a crafted branch name to be interpreted by the victim's shell if the victim selects that branch from the UI. This vulnerability is fixed in 0.2026.05.06.15.42.stable_01.

Analysis

Technical impact

The vulnerability is an OS command injection in Warp's prompt branch selector. When a user publishes a branch with a crafted name to a Git repository that Warp opens, the victim's shell interprets the branch name if they select that branch from the UI, allowing execution of arbitrary commands.

Affected Systems

Warp, an agentic development environment by warpdotdev, is vulnerable in versions from 0.2025.08.06.08.12.stable_00 through 0.2026.05.06.15.42.stable_01. The fix is included in release 0.2026.05.06.15.42.stable_01.

Risk and Exploitability

CVSS score of 8 indicates high severity. The EPSS score is not available, and the vulnerability is not listed in CISA KEV. The attacker must be able to push a malicious branch to a repository that the victim opens in Warp. Selecting the manipulated branch from the UI causes the victim's shell to execute commands embedded in the branch name. The risk is significant if an attacker can control branch names, particularly in shared or untrusted repositories.

Affected Products

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

warpdotdev

warp

affected

Version	Status	Constraints
`>= 0.2025.08.06.08.12.stable_00, < 0.2026.05.13.09.15.stable_01`	affected	—

No data.

Vendor Product Versions

Warpdotdev

Warp

Version	Status	Scheme	Platform
`[0.2025.08.06.08.12.stable_00,0.2026.05.13.09.15.stable_01)`	affected	generic	—

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

Upgrade Warp to version 0.2026.05.06.15.42.stable_01 or later to remove the command injection flaw.
Limit branch publishing rights to trusted users, ensuring only authorized personnel can add new branches to repositories accessed through Warp.
If an upgrade cannot be applied immediately, adopt a policy that sanitizes branch names or disables the branch selection UI for potentially untrusted branches to prevent the shell from interpreting malicious payloads.

Generated by OpenCVE AI on June 24, 2026 at 20:36 UTC.

Tracking

Advisories

No advisories available

Metrics

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploit prediction score: 1.3% (1.320% probability within 30 days)

Exploitation none

Automatable no

Technical Impact total

References

Link	Providers
https://github.com/warpdotdev/warp/commit/4295ec08d01912fe355351547e541277f29288cd
https://github.com/warpdotdev/warp/security/advisories/GHSA-hgvx-4xvm-39pw

History

Jun 26, 2026 10:45 AM First appearance in the feed. Affected vendors updated View changes

Type	Values Removed	Values Added
First Time appeared		Warpdotdev Warpdotdev warp
Vendors & Products		Warpdotdev Warpdotdev warp

Jun 24, 2026 7:30 PM Scoring metrics updated View changes

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Jun 24, 2026 6:00 PM Description updated. Title updated. Weaknesses updated. Added references. Scoring metrics updated View changes

Type	Values Removed	Values Added
Description		Warp is an agentic development environment. From 0.2025.08.06.08.12.stable_00 until 0.2026.05.06.15.42.stable_01, Warp contains a command injection in the prompt branch selector. A user who can publish a branch to a Git repository opened in Warp can cause a crafted branch name to be interpreted by the victim's shell if the victim selects that branch from the UI. This vulnerability is fixed in 0.2026.05.06.15.42.stable_01.
Title		Warp branch selector command injection via Git branch names
Weaknesses		CWE-78
References		https://github.com/warpdotdev/warp/commit/4295ec08d01912fe355351547e541277f29288cd https://github.com/warpdotdev/warp/security/advisories/GHSA-hgvx-4xvm-39pw
Metrics		cvssV3_1 `{'score': 8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H'}`