VYPR
Unrated severityNVD Advisory· Published Jun 24, 2026· Updated Jun 24, 2026

Warp may allow terminal output to access the local clipboard through OSC 52

CVE-2026-48725

Description

Warp is an agentic development environment. From 0.2021.04.25.23.05.stable_00 until 0.2026.05.06.15.42.stable_01, Warp allows terminal output to request access to the local system clipboard. A malicious remote host, remote program, or other attacker-controlled terminal output source can trigger clipboard reads or writes without a separate confirmation step. This crosses the trust boundary between untrusted terminal output and the user's local desktop clipboard. This vulnerability is fixed in 0.2026.05.06.15.42.stable_01.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

1
  • Warpdotdev/Warpllm-fuzzy
    Range: >=0.2021.04.25.23.05.stable_00, <0.2026.05.06.15.42.stable_01

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.