CVE-2024-41997

creationtimestamp| type| source ---|---|--- 2024-10-14 19:10:58+00:00| seen| https://t.me/cvedetector/7823 2026-01-01 07:00:27+00:00| published-proof-of-concept| Telegram/EO89pEeaC3Yk2tbcEMIZIoOoBKLb4G0XE8SeMkGeGz1hE 2026-01-01 09:00:05+00:00| published-proof-of-concept|...

CVE-2024-41997

A command injection vulnerability exists in Warp Terminal (macOS) versions prior to v0.2024.07.16.08.02 within the Docker integration functionality. The root cause is an unsanitized warp:// URI scheme handler where the /docker/open_subshell action accepts a shell parameter that is incorporated in...