Warp Terminal CVE-2026-54686

Exploitation requires that the victim is running Warp with shell integration enabled (the default installation configuration) and views attacker-controlled content within an active Warp terminal session. The attacker must control data that reaches the victim's PTY stream - achievable via a malicious or compromised SSH server that emits crafted OSC escape sequences, a file displayed with cat or a pager, or a program run by the victim that outputs lifecycle hook sequences. The attack is blocked if the victim is not using Warp, if Warp shell integration has been manually disabled, or if the attacker has no means to influence what appears in the victim's terminal. Authentication is not required from the attacker's side (PR:N), but the victim must actively view the malicious output (UI:R). The vulnerability does not provide code execution or credential disclosure - impact is limited to session metadata spoofing within the Warp UI.

The CVSS 4.3 medium score (AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) captures network reachability and low attack complexity, but the I:N assignment underrepresents real impact - spoofing the displayed CWD and SSH transport metadata is an integrity concern that could mislead developers into believing they are operating in a different directory or SSH context than they actually are, potentially triggering downstream user-initiated harm. The A:L assignment is also questionable given that the described impact is metadata spoofing, not a service disruption. No EPSS score was provided; CISA KEV does not list this vulnerability; no public exploit code has been identified. The UI:R requirement is the key limiting factor: a victim must actively open or view attacker-controlled content in Warp. This is not a mass-exploitation candidate - it is a targeted attack surface relevant to developer workstations, particularly those that SSH into untrusted or shared remote environments. The predictable SSH session ID (date + $RANDOM) is a secondary issue patched simultaneously but independently noteworthy for session fixation risk. Overall this is a moderate-priority developer workstation issue rather than a critical infrastructure threat.

A developer SSHes into a malicious or compromised remote server using Warp with shell integration active; the server emits crafted OSC escape sequences containing fake Preexec or SSH lifecycle hook payloads with falsified CWD or session socket path values. Warp processes the unauthenticated hooks and updates its UI to display an incorrect working directory or SSH session context, potentially causing the developer to perform file operations or issue commands they believe are scoped to a different directory or host. No public exploit code has been identified at time of analysis.