https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T02:22:21.325725+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-330017 EUVD-2026-330017 2026-10-06T02:22:21.357457+00:00 EUVD-2026-330017 https://cve.radiocsirt.org/vuln/fkie_cve-2026-48703 fkie_cve-2026-48703 2026-10-06T02:22:21.357494+00:00

Warp is an agentic development environment. From 0.2025.04.09.08.11.stable_00 until 0.2026.05.06.15.42.stable_01, Warp contains a command execution policy bypass in Agent code search tools. The affected Grep and FileGlob actions are authorized as read/search operations, but their implementations build shell command strings from Agent-controlled inputs (search text, paths, glob patterns) and execute them in the active terminal session. This vulnerability is fixed in 0.2026.05.06.15.42.stable_01.