VYPR
← All advisories
Medium severity6.6NVD Advisory· Published Oct 14, 2024· Updated Jun 17, 2026

CVE-2024-41997

CVE-2024-41997

Description

An issue was discovered in version of Warp Terminal prior to 2024.07.18 (v0.2024.07.16.08.02). A command injection vulnerability exists in the Docker integration functionality. An attacker can create a specially crafted hyperlink using the warp://action/docker/open_subshell intent that when clicked by the victim results in command execution on the victim's machine.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Warpdotdev/Warpreferences2 versions
    (expand)+ 1 more
    • (no CPE)
    • (no CPE)range: <2024.07.18 (v0.2024.07.16.08.02)
  • Warp/Warp Terminalllm-fuzzy
    Range: <2024.07.18 (v0.2024.07.16.08.02)

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.