What is the CVSS score of CVE-2026-54699?

CVE-2026-54699 has a CVSS 3.1 base score of 7.7 (High). CVSS vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H. EPSS exploitation probability: 0.4%.

Which versions of Warp Terminal are affected by CVE-2026-54699?

Warp terminal software used by development teams on Windows Subsystem for Linux has a vulnerability allowing attackers to execute system commands on developer workstations through malicious URLs.. A patch is available.

How to fix or mitigate CVE-2026-54699?

Within 24 hours: Identify all Warp installations on WSL systems and determine which are running vulnerable versions (0.2024.03.12.08.02.stable_01 through pre-0.2026.05.06.15.42.stable_01). Within 7 days: Deploy Warp patch version 0.2026.05.06.15.42.stable_01 or later to all affected developer workstations and send awareness communication about avoiding clicking unfamiliar URLs in terminal output. Within 30 days: Confirm patch deployment across all at-risk systems and review endpoint detection logs for signs of exploitation attempts.

Warp Terminal CVE-2026-54699

EUVD-2026-39012 HIGH

OS Command Injection (CWE-78)

2026-06-24 GitHub_M

Command Injection Microsoft Warp Warpdotdev

7.7

CVSS 3.1 · Vendor: GitHub_M

Severity by source

Vendor (GitHub_M) PRIMARY

7.7 HIGH

AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

vuln.today AI

7.7 HIGH

Trigger arrives via local terminal output (AV:L), depends on the non-default wslview-failure fallback (AC:H), needs a victim click (UI:R), and command execution crosses WSL into the Windows host (S:C, C/I/A:H).

3.1 AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

4.0 AV:L/AC:H/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Primary rating from Vendor (GitHub_M).

CVSS VectorVendor: GitHub_M

Attack Vector

Local

Attack Complexity

High

Privileges Required

None

User Interaction

Required

Scope

Changed

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Patch available

Jun 24, 2026 - 19:17 EUVD

Source Code Evidence Fetched

Jun 24, 2026 - 18:17 vuln.today

Analysis Generated

Jun 24, 2026 - 18:17 vuln.today

CVE Published

Jun 24, 2026 - 17:26 cve.org

HIGH 7.7

DescriptionCVE.org

Warp is an agentic development environment. From 0.2024.03.12.08.02.stable_01 until 0.2026.05.06.15.42.stable_01, Warp contains an OS command injection vulnerability in the WSL URL-opening fallback. When Warp is running under WSL and cannot open a URL through wslview, it falls back to a Windows command processor path. A URL controlled through terminal output can reach that fallback when the user opens the link. This vulnerability is fixed in 0.2026.05.06.15.42.stable_01.

AnalysisAI

OS command injection in Warp (the agentic terminal/development environment) affects builds from 0.2024.03.12.08.02.stable_01 up to the fix in 0.2026.05.06.15.42.stable_01 when running under Windows Subsystem for Linux. When wslview cannot open a URL, Warp falls back to a Windows command processor (cmd.exe /c start), so a malicious URL emitted into terminal output executes attacker-controlled Windows commands once the user clicks the link. No public exploit identified at time of analysis and the issue is not in CISA KEV, but the fix commit clearly documents the injection path.

Technical ContextAI

The affected component is Warp's URL-opening logic in crates/warpui/src/windowing/winit/delegate.rs (open_url_in_system). Under WSL, Warp first attempts wslview; on failure it previously shelled out to the Windows command interpreter via command::blocking::Command::new("cmd.exe").args(["/c", "start", url]), passing an unsanitized, terminal-derived URL straight onto a Windows command line. This is a classic CWE-78 OS Command Injection: untrusted input (a URL printed by any process whose output reaches the Warp terminal) is concatenated into a command without scheme validation or quoting, allowing argument/metacharacter injection and execution of non-http schemes (file:, ms-msdt:, search-ms:, javascript:). The CPE cpe:2.3:a:warpdotdev:warp:*:*:*:*:*:*:*:* confirms the application is Warp by warpdotdev. The fix replaces cmd.exe start with rundll32.exe url.dll,FileProtocolHandler and only proceeds if url::Url::parse succeeds and the scheme is http/https, using the re-serialized (percent-encoded) URL so characters like " become %22 before reaching Windows.

RemediationAI

Vendor-released patch: 0.2026.05.06.15.42.stable_01 - upgrade Warp to this version or later, which validates that URLs parse and use only the http/https scheme and switches the WSL fallback from cmd.exe /c start to rundll32.exe url.dll,FileProtocolHandler with a re-serialized, percent-encoded URL. Details are in the advisory GHSA-xmw3-wj6r-48m4 (https://github.com/warpdotdev/warp/security/advisories/GHSA-xmw3-wj6r-48m4) and the fix commit c66cff48afba73bb1f26f82e5d524018bacb748e. If you cannot upgrade immediately, the most effective compensating control is to avoid clicking hyperlinks rendered in the Warp terminal while running under WSL, especially links produced by untrusted command output or remote content; additionally, ensure wslview/wslu is installed and functioning so the vulnerable cmd.exe fallback path is not reached (trade-off: this only avoids the fallback and is not a guaranteed fix), and treat any process that can write to the terminal as capable of delivering a payload. These are stopgaps with usability impact and do not fully close the injection - patching is the only complete remedy.