Warp discloses breach exposing AI agent logs, user telemetry data

Summary

Agent decision logs and telemetry data belonging to Warp users were exposed in an attack on a third-party vendor in the project's infrastructure. CEO Zach Lloyd estimates roughly 1% of users may have been affected, and the company has not clarified whether source code, prompts or credentials were exposed.

Topics

• AI agents

Related items

• HighGHSA-wf6j-7hvr-gr93: Hydra legacy target blacklist permits unsafe PyYAML loadingSimilar attack · Hugging Face Security Advisories
• LowResearchers Break Into Anthropic’s Systems in Just 12 Hours—Through Third-Party SoftwareSimilar attack · ReversingLabs Blog
• HighCVE-2026-117573: hagent OS command injection through args in arduino and esp32 MCP toolsSimilar attack · NVD/CVE Database
• HighCVE-2026-117569: Kali-GPT OS command injection in execute_tool through MCP scanner parametersSimilar attack · NVD/CVE Database
• MediumTricks from the Past deployed via signed ChatGPT and Claude binariesSimilar attack · Check Point Research