CVE-2026-48725 is a vulnerability in the Warp agentic development environment where terminal output can request access to the local system clipboard without a separate confirmation step. This allows an attacker controlling terminal output to perform clipboard reads or writes, violating the trust boundary between untrusted terminal output and the user's local desktop clipboard. The issue affects versions from 0.2021.04.25.23.05.stable_00 through versions prior to 0.2026.05.06.15.42.stable_01. The vulnerability is classified under CWE-276 (Incorrect Default Permissions) and has a CVSS 3.1 score of 8.1, indicating high severity. The vulnerability is fixed in version 0.2026.05.06.15.42.stable_01.

An attacker controlling terminal output can read from or write to the local system clipboard without user consent, potentially leading to unauthorized disclosure or manipulation of clipboard data. This compromises confidentiality and integrity of clipboard contents but does not affect availability. The vulnerability crosses trust boundaries between untrusted terminal output and the local desktop environment.

A fix is available in Warp version 0.2026.05.06.15.42.stable_01. Users should upgrade to this version or later to remediate the vulnerability. No additional mitigation guidance is provided in the available data.