Vendor
Warp terminal emulator is vulnerable to a DCS lifecycle hook spoofing issue. The application fails to verify the authenticity of state-mutating lifecycle hooks transmitted via the PTY stream, allowing an attacker to spoof Current Working Directory (CWD) and SSH session transport metadata if a user views attacker-controlled terminal output.