{"id":"CMP-202610-warp-ai-terminal-agentic-dev-environment-breached-through-a-","kind":"campaign","aliases":[],"related":[],"title":"Warp (AI terminal / agentic dev environment) breached through a third-party vendor: agent logs and telemetry of about 1% of users exposed","description":null,"summary":"Warp says attackers exploited an unnamed third-party vendor in its infrastructure. Warp found out on Friday 2026-10-23 and says it detected and contained the attack within hours. CEO Zach Lloyd estimates roughly 1% of Warp users are affected (Warp claims 800,000+ users). The exposed data is agent decision logs/traces and user telemetry. Warp has not said whether that included source code, prompts, terminal output or credentials. Warp describes the attack as an 'agent swarm' using a sophisticated penetration and escalation technique. CrowdStrike is investigating and law enforcement has been told. Affected users have been notified. Developers who use Warp's AI agents are at risk, because agent traces can contain secrets, commands and code from their sessions. This comes a week after the OpenCode breach that exposed stored provider API keys. Indicators of compromise and the vendor's identity: unknown.","severity":"medium","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"Warp","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":[],"tags":["ai-agents","breach","campaign","early-warning","warp"],"not_affected_if":[],"how_to_check":"- Check whether anyone on the team uses Warp, especially its AI agent features.\\n- Check for a breach notification email from Warp.\\n- Look at what Warp agent sessions handled: secrets, API keys or tokens that were pasted, printed or read during agent runs.\\n- Indicators of compromise: unknown.","fix":"- If you were notified, or if agent sessions touched secrets, rotate the API keys, cloud credentials and tokens that showed up in Warp agent sessions.\\n- Watch Warp account activity and the provider accounts linked to it.\\n- Treat unsolicited messages about Warp or this incident as possible phishing.\\n- Follow Warp's investigation updates for the vendor name and for confirmation of the exposed data types.","status":"open","published_at":null,"first_seen_at":"2026-10-27T16:27:20+00:00","triaged_at":"2026-10-27T16:27:20+00:00","updated_at":"2026-10-27T16:27:20+00:00","category":"ai-tooling","confidence":null,"triage":null,"analyst_status":"done","analyst_note":null,"search":"'-10':65B '-202610':25A '-23':66B '000':91B '1':20A,82B '2026':64B '800':90B 'a':35A 'affect':87B,141B 'agent':4A,14A,39B,97B,123B,152B,157B 'agentic':30A 'ai':2A,28A,38B,151B 'ai-ag':37B 'api':180B 'attack':48B,74B,120B 'breach':7A,40B,175B 'breached':33A 'campaign':41B 'ceo':77B 'claim':89B 'cmp':24A 'code':111B,164B 'come':169B 'command':162B 'compromis':184B 'contain':72B,160B 'credenti':116B 'crowdstrik':132B 'data':95B 'decis':98B 'describ':118B 'detect':70B 'dev':5A,31A 'develop':146B 'earli':43B 'early-warn':42B 'enforc':137B 'environ':6A 'environment':32A 'escal':130B 'estim':80B 'exploit':49B 'expos':23A,94B,177B 'found':60B 'friday':63B 'hour':76B 'ident':189B 'includ':109B 'indic':182B 'infrastructur':58B 'investig':134B 'key':181B 'law':136B 'lloyd':79B 'log':15A 'logs/traces':99B 'notifi':145B 'opencod':174B 'output':114B 'parti':12A,54B 'penetr':128B 'prompt':112B 'provid':179B 'risk':155B 'rough':81B 'said':106B 'say':47B,68B 'secret':161B 'session':167B 'sophist':127B 'sourc':110B 'store':178B 'swarm':124B 'techniqu':131B 'telemetri':17A,102B 'termin':3A,113B 'terminal':29A 'third':11A,53B 'third-parti':10A,52B 'through':34A 'told':140B 'trace':158B 'unknown':190B 'unnam':51B 'use':125B,148B 'user':22A,85B,92B,101B,142B 'vendor':13A,55B,187B 'warn':44B 'warp':1A,27A,36A,45B,46B,59B,84B,88B,103B,117B,149B 'warp-ai-terminal-agentic-dev-environment-breached-through-a':26A 'week':171B 'whether':107B 'within':75B 'zach':78B","nicknames":[],"mitigations":[],"who_affected":null,"tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-27T00:00:00+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"analyst","external_id":"CMP-202610-warp-ai-terminal-agentic-dev-environment-breached-through-a-","url":null,"severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-27T16:27:20+00:00","fetched_at":"2026-10-27T16:27:20+00:00","note":null}],"documents":[{"id":6904,"url":"https://x.com/BleepinComputer/status/2115115315168248276","title":"@BleepinComputer: Warp discloses breach exposing AI agent logs, user telemetry data\nhttps://t.co/a","kind":"post","source":"x","text":"Warp discloses breach exposing AI agent logs, user telemetry data\nhttps://t.co/a3clVgUyRP\n\nhttps://t.co/a3clVgUyRP\n\nlikes 1 reposts 1","published_at":"2026-10-27T16:16:02+00:00","relation":"describes","confidence":null,"note":null},{"id":6913,"url":"https://www.bleepingcomputer.com/news/security/warp-discloses-breach-exposing-ai-agent-logs-user-telemetry-data/","title":"Warp discloses breach exposing AI agent logs, user telemetry data","kind":"other","source":"analyst","text":"BleepingComputer (Bill Toulas), 2026-10-27. Warp CEO Zach Lloyd: on Friday Warp became aware of an active, narrow-banded exploitation of a vendor in Warp's infrastructure; detected within hours, remediated. Roughly 1% of Warp users may be impacted (platform claims 800,000+ users). Exposed: agent decision logs/traces and telemetry; not clarified whether source code, prompts or credentials were included. Attack described as powered by an agent swarm using a sophisticated penetration and escalation technique. Third-party vendor not named; CrowdStrike engaged; law enforcement informed; impacted users notified. Follows OpenCode breach last week exposing stored provider API keys (~1.4% of users, unauthorized charges up to $1,700). Users advised to monitor account activity and be cautious with unsolicited communications.","published_at":"2026-10-27T00:00:00+00:00","relation":"describes","confidence":null,"note":null}],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}