CVE-2026-48721 is a vulnerability in the Warp development environment affecting its default unsandboxed CLI agent profile. The CLI profile uses a denylist to restrict certain commands that require user confirmation. However, the validation of commands occurs before canonicalization of leading environment-variable assignments, which can be manipulated by an attacker controlling the agent's command output. This leads to a permission-check bypass allowing execution of denylisted commands without confirmation. The vulnerability affects versions from 0.2025.10.08.08.12.stable_00 through 0.2026.05.06.15.42.stable_01 (exclusive).

Successful exploitation allows an attacker with the ability to influence the agent's command output to bypass the denylist safety mechanism in the CLI profile, potentially executing commands that should require confirmation. This can lead to full confidentiality, integrity, and availability compromise of the affected system as indicated by the CVSS score of 8.6 with high impact on all security properties.

A fix is available in Warp version 0.2026.05.06.15.42.stable_01. Users should upgrade to this version or later to remediate the vulnerability. No other mitigation or temporary workaround is indicated in the available data.