Warp is an agentic development environment that, in versions from 0.2021.04.25.23.05.stable_00 through 0.2026.05.06.15.42.stable_01, improperly accepts certain state-mutating terminal lifecycle hooks from the PTY stream without verifying that these hooks originate from Warp's shell integration for the active session. This lack of verification allows an attacker who can cause a victim to view attacker-controlled terminal output to spoof lifecycle metadata such as the current working directory or SSH session transport metadata. This vulnerability is addressed and fixed in version 0.2026.05.06.15.42.stable_01.

The vulnerability allows spoofing of selected lifecycle metadata in Warp's terminal environment, such as the current working directory and SSH session transport metadata. There is no impact on confidentiality or integrity, but there is a low impact on availability. No known exploits are currently reported in the wild.

A fix is available in Warp version 0.2026.05.06.15.42.stable_01. Users should upgrade to this version or later to remediate the vulnerability. Patch status is not explicitly stated beyond the fixed version; check the vendor advisory for the latest remediation guidance.