Warp, an agentic development environment, has an OS command injection vulnerability (CWE-78) in its WSL URL-opening fallback. When Warp runs under Windows Subsystem for Linux (WSL) and cannot open a URL through the standard wslview utility, it falls back to executing a Windows command processor path. A URL controlled via terminal output can reach this fallback, allowing injection of OS commands. This vulnerability affects versions starting from 0.2024.03.12.08.02.stable_01 until the fixed version 0.2026.05.06.15.42.stable_01. The CVSS 3.1 base score is 7.7, indicating high severity with high impact on confidentiality, integrity, and availability, requiring user interaction and having a complex attack vector with no privileges required.

Successful exploitation allows an attacker to execute arbitrary OS commands on the Windows host via the fallback URL-opening mechanism under WSL. This can lead to full compromise of the affected system's confidentiality, integrity, and availability. The vulnerability requires user interaction (opening a malicious URL) and has a complex attack vector limited to local access under WSL.

This vulnerability is fixed in Warp version 0.2026.05.06.15.42.stable_01. Users should upgrade to this version or later to remediate the issue. No other official remediation or temporary fixes are indicated. Patch status is confirmed by the vendor's versioning information. Until upgrading, users should avoid opening untrusted URLs in Warp running under WSL.