medium6.6
CVE-2024-41997
An issue was discovered in version of Warp Terminal prior to 2024.07.18 (v0.2024.07.16.08.02).
Impact
An issue was discovered in version of Warp Terminal prior to 2024.07.18 (v0.2024.07.16.08.02). A command injection vulnerability exists in the Docker integration functionality. An attacker can create a specially crafted hyperlink using the `warp://action/docker/open_subshell` intent that when clicked by the victim results in command execution on the victim's machine.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Warp | Warp Terminal | before 2024.07.18 |
Versions were read from the advisory text. No structured product data has been published for this record yet.