Free and open · new CVEs checked every 20 minutesStatusRSSOpen dataContact

CVE-2026-48719: Warp is an agentic development environment

46
This month
HIGH 8.0

CVE-2026-48719 is a high-severity flaw (CVSS 8.0) affecting affected software. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

Warp is an agentic development environment. From 0.2025.08.06.08.12.stable_00 until 0.2026.05.06.15.42.stable_01, Warp contains a command injection in the prompt branch selector. A user who can publish a branch to a Git repository opened in Warp can cause a crafted branch name to be interpreted by the victim's shell if the victim selects that branch from the UI. This vulnerability is fixed in 0.2026.05.06.15.42.stable_01.

Why this priority

  • High severity

A fixed release or distro patch exists.

Risk facts

CVSS score8.0 (High)
Attack vectorNetwork (remote)
Attack complexityLow
Privileges neededLow
User interactionRequired
EPSS exploit chance1.3% (top 29%)
CISA exploited listNo
WeaknessCWE-78
Published2026-06-24
Last modified2026-10-25
Publisher (CNA): GitHub, Inc.

Share: LinkedIn · X · Reddit

Last updated 2026-10-25 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score

Timeline

Exact fixes by distribution

Fedora 46 · log4cplus · FIXED · 2.2.0.1-2.fc46 · FEDORA-2026-fc241370c9 · source
sudo dnf upgrade --advisory=FEDORA-2026-fc241370c9
Fedora ELN · velocitty · FIXED · 1.0.3-2.eln159 · FEDORA-2026-edae8cd295 · source
sudo dnf upgrade --advisory=FEDORA-2026-edae8cd295
Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Quick answers

How do I fix CVE-2026-48719?

No fixed release is listed yet. Watch the vendor advisory and apply any mitigation shown on this page.

Is CVE-2026-48719 being exploited?

CVE-2026-48719 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

What does CVE-2026-48719 affect?

CVE-2026-48719 affects affected software. Severity is high (CVSS 8.0). Warp is an agentic development environment. From 0.2025.08.06.08.12.stable_00 until 0.2026.05.06.15.42.stable_01, Warp contains a command injection in the prompt branch selector. A user who can publish a branch to a Git repository opened in

How urgent is CVE-2026-48719?

Priority 46/100. High severity

Software pages

Git vulnerabilities

References

← Back to latest CVEs

Get the weekly exploited-CVE digest by emailThe CVEs being attacked this week and how to fix them. No spam, unsubscribe any time.