{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/warp--0.2026.05.06.15.42.stable_01/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:warp:warp:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":4.3,"id":"CVE-2026-54686"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Warp (\u003c 0.2026.05.06.15.42.stable_01)"],"_cs_severities":["low"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["Warp"],"content_html":"","date_modified":"2026-10-25T03:41:05Z","date_published":"2026-10-25T03:41:05Z","id":"https://feed.craftedsignal.io/briefs/2026-10-warp-dcs-spoofing/","summary":"Warp terminal emulator is vulnerable to a DCS lifecycle hook spoofing issue. The application fails to verify the authenticity of state-mutating lifecycle hooks transmitted via the PTY stream, allowing an attacker to spoof Current Working Directory (CWD) and SSH session transport metadata if a user views attacker-controlled terminal output.","title":"Warp Terminal Emulator: DCS Lifecycle Hook Spoofing (CVE-2026-54686)","url":"https://feed.craftedsignal.io/briefs/2026-10-warp-dcs-spoofing/"}],"language":"en","title":"CraftedSignal Threat Feed - Warp (\u003c 0.2026.05.06.15.42.stable_01)","version":"https://jsonfeed.org/version/1.1"}