CVE-2026-54686

Warp: DCS lifecycle hook spoofing can alter terminal session metadata

Published Jun 24, 2026 CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed

Description

Warp is an agentic development environment. From 0.2021.04.25.23.05.stable_00 until 0.2026.05.06.15.42.stable_01, Warp accepted certain state-mutating terminal lifecycle hooks from the PTY stream without verifying that the hooks were emitted by Warp's shell integration for the active session. An attacker who could cause a victim to view attacker-controlled terminal output in Warp could spoof selected lifecycle metadata, including the current working directory reported for the active block or SSH session transport metadata. This vulnerability is fixed in 0.2026.05.06.15.42.stable_01.

Analysis

Technical impact

An attacker who can cause a victim to view attacker-controlled terminal output in Warp can use the lack of verification of state‑mutating lifecycle hooks to spoof metadata. This allows the spoofed metadata to include the current working directory or SSH transport details, leading to misleading session information. The flaw is a direct consequence of accepting hooks from the PTY stream without validating their origin and is classified under CWE-78 and CWE-88.

Affected Systems

Warps the open‑source agentic development environment with product code name Warp. The vulnerability exists in releases starting from 0.2021.04.25.23.05.stable_00 through 0.2026.05.06.15.42.stable_01. Any installation of these versions running on a machine where an attacker can inject terminal output is impacted.

Risk and Exploitability

The CVSS score of 4.3 indicates moderate impact. Exploitation requires that the attacker is able to steer terminal output to the vulnerable Warp instance, which is commonly a local or user‑level threat. The EPSS score is unavailable, and the vulnerability is not currently listed in CISA KEV. Given the lack of remote code execution, the immediate risk is the ability to deceive users by presenting incorrect session information rather than allowing arbitrary code execution.

Affected Products

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

warpdotdev

warp

affected

Version	Status	Constraints
`>= 0.2021.04.25.23.05.stable_00, < 0.2026.05.13.09.15.stable_01`	affected	—

No data.

Vendor Product Versions

Warpdotdev

Warp

Version	Status	Scheme	Platform
`[0.2021.04.25.23.05.stable_00,0.2026.05.13.09.15.stable_01)`	affected	generic	—

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

Upgrade Warp to 0.2026.05.06.15.42.stable_01 or newer, which eliminates the acceptance of unverified lifecycle hooks.
If an upgrade is not possible, restrict terminal output to trusted processes and users and monitor for unexpected lifecycle hook patterns.
Follow Warp security best practices: regularly check the Warp repository for updates and verify that only Warp’s shell integration emits lifecycle hooks in production environments.

Generated by OpenCVE AI on June 24, 2026 at 20:37 UTC.

Tracking

Advisories

No advisories available

Metrics

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact Low

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploit prediction score: < 1% (0.404% probability within 30 days)

Exploitation none

Automatable no

Technical Impact partial

References

Link	Providers
https://github.com/warpdotdev/warp/commit/32d21d15c9a3da1a923d1ed66226cf5cba081d16
https://github.com/warpdotdev/warp/commit/51bd3267803c5cc0a45074fa19fd50162be7c917
https://github.com/warpdotdev/warp/security/advisories/GHSA-9w2v-jhww-vm85

History

Jun 26, 2026 10:45 AM First appearance in the feed. Affected vendors updated View changes

Type	Values Removed	Values Added
First Time appeared		Warpdotdev Warpdotdev warp
Vendors & Products		Warpdotdev Warpdotdev warp

Jun 25, 2026 5:30 PM Scoring metrics updated View changes

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Jun 24, 2026 6:00 PM Description updated. Title updated. Weaknesses updated. Added references. Scoring metrics updated View changes

Type	Values Removed	Values Added
Description		Warp is an agentic development environment. From 0.2021.04.25.23.05.stable_00 until 0.2026.05.06.15.42.stable_01, Warp accepted certain state-mutating terminal lifecycle hooks from the PTY stream without verifying that the hooks were emitted by Warp's shell integration for the active session. An attacker who could cause a victim to view attacker-controlled terminal output in Warp could spoof selected lifecycle metadata, including the current working directory reported for the active block or SSH session transport metadata. This vulnerability is fixed in 0.2026.05.06.15.42.stable_01.
Title		Warp: DCS lifecycle hook spoofing can alter terminal session metadata
Weaknesses		CWE-78 CWE-88
References		https://github.com/warpdotdev/warp/commit/32d21d15c9a3da1a923d1ed66226cf5cba081d16 https://github.com/warpdotdev/warp/commit/51bd3267803c5cc0a45074fa19fd50162be7c917 https://github.com/warpdotdev/warp/security/advisories/GHSA-9w2v-jhww-vm85
Metrics		cvssV3_1 `{'score': 4.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L'}`

Subscriptions

Warpdotdev Warp

Weaknesses

CWE-78
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CWE-88
Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')