CVE-2024-41997

creationtimestamp| type| source ---|---|--- 2024-10-14 19:10:58+00:00| seen| https://t.me/cvedetector/7823 2026-01-01 07:00:27+00:00| published-proof-of-concept| Telegram/EO89pEeaC3Yk2tbcEMIZIoOoBKLb4G0XE8SeMkGeGz1hE 2026-01-01 09:00:05+00:00| published-proof-of-concept|...

CVE-2024-41997

CVE-2024-41997 affects Warp Terminal prior to 2024.07.18 (v0.2024.07.16.08.02). The Docker integration uses warp:// URIs and the /docker/open_subshell action accepts a shell parameter that is incorporated into a command string without sanitization, enabling command injection. An attacker can craf...