CVE-2026-48719

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-48719", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2026-05-22T18:47:27.756Z", "datePublished": "2026-06-24T17:33:55.387Z", "dateUpdated": "2026-06-24T19:03:22.554Z"}, "containers": {"cna": {"title": "Warp branch selector command injection via Git branch names", "problemTypes": [{"descriptions": [{"cweId": "CWE-78", "lang": "en", "description": "CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H", "version": "3.1"}}], "references": [{"name": "https://github.com/warpdotdev/warp/security/advisories/GHSA-hgvx-4xvm-39pw", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/warpdotdev/warp/security/advisories/GHSA-hgvx-4xvm-39pw"}, {"name": "https://github.com/warpdotdev/warp/commit/4295ec08d01912fe355351547e541277f29288cd", "tags": ["x_refsource_MISC"], "url": "https://github.com/warpdotdev/warp/commit/4295ec08d01912fe355351547e541277f29288cd"}], "affected": [{"vendor": "warpdotdev", "product": "warp", "versions": [{"version": ">= 0.2025.08.06.08.12.stable_00, < 0.2026.05.13.09.15.stable_01", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-06-24T17:33:55.387Z"}, "descriptions": [{"lang": "en", "value": "Warp is an agentic development environment. From 0.2025.08.06.08.12.stable_00 until 0.2026.05.06.15.42.stable_01, Warp contains a command injection in the prompt branch selector. A user who can publish a branch to a Git repository opened in Warp can cause a crafted branch name to be interpreted by the victim's shell if the victim selects that branch from the UI. This vulnerability is fixed in 0.2026.05.06.15.42.stable_01."}], "source": {"advisory": "GHSA-hgvx-4xvm-39pw", "discovery": "UNKNOWN"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-06-24T19:03:06.614295Z", "id": "CVE-2026-48719", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-06-24T19:03:22.554Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-48719", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-06-24T19:03:06.614295Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-06-24T19:03:09.669Z"}}], "cna": {"title": "Warp branch selector command injection via Git branch names", "source": {"advisory": "GHSA-hgvx-4xvm-39pw", "discovery": "UNKNOWN"}, "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}}], "affected": [{"vendor": "warpdotdev", "product": "warp", "versions": [{"status": "affected", "version": ">= 0.2025.08.06.08.12.stable_00, < 0.2026.05.13.09.15.stable_01"}]}], "references": [{"url": "https://github.com/warpdotdev/warp/security/advisories/GHSA-hgvx-4xvm-39pw", "name": "https://github.com/warpdotdev/warp/security/advisories/GHSA-hgvx-4xvm-39pw", "tags": ["x_refsource_CONFIRM"]}, {"url": "https://github.com/warpdotdev/warp/commit/4295ec08d01912fe355351547e541277f29288cd", "name": "https://github.com/warpdotdev/warp/commit/4295ec08d01912fe355351547e541277f29288cd", "tags": ["x_refsource_MISC"]}], "descriptions": [{"lang": "en", "value": "Warp is an agentic development environment. From 0.2025.08.06.08.12.stable_00 until 0.2026.05.06.15.42.stable_01, Warp contains a command injection in the prompt branch selector. A user who can publish a branch to a Git repository opened in Warp can cause a crafted branch name to be interpreted by the victim's shell if the victim selects that branch from the UI. This vulnerability is fixed in 0.2026.05.06.15.42.stable_01."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-78", "description": "CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-06-24T17:33:55.387Z"}}}, "cveMetadata": {"cveId": "CVE-2026-48719", "state": "PUBLISHED", "dateUpdated": "2026-06-24T19:03:22.554Z", "dateReserved": "2026-05-22T18:47:27.756Z", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "datePublished": "2026-06-24T17:33:55.387Z", "assignerShortName": "GitHub_M"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "warp", "vendor": "warpdotdev", "versions": [{"status": "affected", "version": ">= 0.2025.08.06.08.12.stable_00, < 0.2026.05.13.09.15.stable_01"}]}], "source": "security-advisories@github.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Warp is an agentic development environment. From 0.2025.08.06.08.12.stable_00 until 0.2026.05.06.15.42.stable_01, Warp contains a command injection in the prompt branch selector. A user who can publish a branch to a Git repository opened in Warp can cause a crafted branch name to be interpreted by the victim's shell if the victim selects that branch from the UI. This vulnerability is fixed in 0.2026.05.06.15.42.stable_01."}, {"lang": "es", "value": "Warp es un entorno de desarrollo ag\u00e9ntico. Desde 0.2025.08.06.08.12.stable_00 hasta 0.2026.05.06.15.42.stable_01, Warp contiene una inyecci\u00f3n de comandos en el selector de ramas del prompt. Un usuario que puede publicar una rama en un repositorio Git abierto en Warp puede hacer que un nombre de rama manipulado sea interpretado por el shell de la v\u00edctima si la v\u00edctima selecciona esa rama desde la interfaz de usuario. Esta vulnerabilidad est\u00e1 corregida en 0.2026.05.06.15.42.stable_01."}], "id": "CVE-2026-48719", "lastModified": "2026-10-25T22:10:00.150", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.0, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.1, "impactScore": 5.9, "source": "security-advisories@github.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-48719", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-06-24T19:03:06.614295Z", "version": "2.0.3"}}]}, "published": "2026-06-24T18:17:17.983", "references": [{"source": "security-advisories@github.com", "url": "https://github.com/warpdotdev/warp/commit/4295ec08d01912fe355351547e541277f29288cd"}, {"source": "security-advisories@github.com", "url": "https://github.com/warpdotdev/warp/security/advisories/GHSA-hgvx-4xvm-39pw"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-78"}], "source": "security-advisories@github.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0.2025.08.06.08.12.stable_00,0.2026.05.13.09.15.stable_01)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "warp", "source": "cna", "vendor": "warpdotdev"}, "product": "warp", "vendor": "warpdotdev"}], "created": "2026-06-24T20:45:03.357342+00:00", "updated": "2026-06-26T09:40:32.686055+00:00", "vendors": ["warpdotdev", "warpdotdev$PRODUCT$warp"]}