CVE-2024-41997

An issue was discovered in version of Warp Terminal prior to 2024.07.18 (v0.2024.07.16.08.02). A command injection vulnerability exists in the Docker integration functionality. An attacker can create a specially crafted hyperlink using the `warp://action/docker/open_subshell` intent that when clicked by the victim results in command execution on the victim's machine.

• CWE-94

• https://docs.warp.dev/features/integrations-and-plugins#docker
• https://docs.warp.dev/getting-started/changelog#id-2024.07.18-v0.2024.07.16.08.02
• https://gist.github.com/bhyh/d1ee7a825fce283bf8acbdb42c8a7832
• https://github.com/warpdotdev/warp

Published

Oct 14, 2024

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-4199The Bulk Posts Editing For WordPress plugin for WordPress is…4.3
• CVE-2024-41990An issue was discovered in Django 5.0 before 5.0.8 and 4.2 b…7.5
• CVE-2024-41991An issue was discovered in Django 5.0 before 5.0.8 and 4.2 b…7.5
• CVE-2024-41992Wi-Fi Alliance wfa_dut (in Wi-Fi Test Suite) through 9.0.0 a…8.8
• CVE-2024-41995Initialization of a resource with an insecure default vulner…7.5
• CVE-2024-41996Validating the order of the public keys in the Diffie-Hellma…7.5
• CVE-2024-41999Smart-tab Android app installed April 2023 or earlier contai…6.8
• CVE-2024-4200In Progress® Telerik® Reporting versions prior to 2024 Q2 (1…7.8
• CVE-2024-42000Mattermost versions 9.10.x <= 9.10.2, 9.11.x <= 9.11.1, 9.5.…4.3
• CVE-2024-42001An improper authentication vulnerability affecting Vonets …9.8
• CVE-2024-42004A library injection vulnerability exists in Microsoft Teams …9.8
• CVE-2024-42005An issue was discovered in Django 5.0 before 5.0.8 and 4.2 b…7.3