CVE-2026-48721 Details

A command execution permission-check bypass vulnerability has been identified in Warp versions 0.2025.10.08.08.12.stable_00 prior to 0.2026.05.06.15.42.stable_01. This vulnerability exists in the default unsandboxed CLI agent profile, which is non-interactive and relies on a command denylist to manage commands that require user confirmation. The issue arises because command strings were evaluated before removing leading environment-variable assignments, allowing an attacker to manipulate the agent's command output and bypass denylisted commands. Exploitation requires user interaction, as the victim must run the unsandboxed CLI agent in an environment controlled by the attacker or one that allows prompt injection.

Users are advised to update to Warp version 0.2026.05.06.15.42.stable_01 or later. If an immediate update is not possible, avoid using the unsandboxed CLI agent on untrusted or prompt-injectable content.