[CVE-2026-48731] AI-Assisted Discovery of Command Injection in Warp Terminal

Disclosure status: Reported to vendor and coordinated through a private fix path. I. Introduction Warp is an agentic development environment, born out of the terminal. Use Warp's built-in coding agent