Warp Terminal Breach: Third-Party Vendor Compromise Exposes AI Agent Logs & User Telemetry – Detection and Containment Guide

---
title: Warp AI Agent Log Access Anomaly
id: 8f7a2b1c-4d3e-4f5a-9b8c-7d6e5f4a3b2c
status: experimental
description: Detects unusual access patterns to Warp agent decision logs or telemetry files by non-standard processes
references:
  - https://www.bleepingcomputer.com/news/security/warp-discloses-breach-exposing-ai-agent-logs-user-telemetry-data/
author: Security Arsenal
date: 2026/01/15
tags:
  - attack.collection
  - attack.t1074
  - attack.exfiltration
logsource:
  category: process_creation
  product: linux
  # Note: Warp primarily targets macOS and Linux; adjust for Windows when applicable
detection:
  selection:
    CommandLine|contains:
      - 'warp'
      - 'agent'
      - 'log'
      - 'telemetry'
    CommandLine|contains:
      - 'cat'
      - 'tail'
      - 'grep'
      - 'curl'
      - 'wget'
      - 'base64'
  condition: selection
falsepositives:
  - Legitimate developer debugging of Warp agent behavior
  - Warp support tools collecting diagnostic bundles
level: medium
---
title: Suspicious Third-Party API Egress from Development Workstation
id: 9e8d7c6b-5a4f-3e2d-1c0b-9a8f7e6d5c4b
status: experimental
description: Detects large data transfers or connections to unusual third-party SaaS endpoints from developer workstations, potentially indicating exfiltration of agent logs
references:
  - https://attack.mitre.org/techniques/T1567/
author: Security Arsenal
date: 2026/01/15
tags:
  - attack.exfiltration
  - attack.t1567.002
logsource:
  category: network_connection
  product: linux
detection:
  selection:
    Image|endswith:
      - '/warp'
      - '/Warp'
      - '/warp-terminal'
    DestinationPort:
      - 443
      - 80
  filter:
    DestinationHostname|contains:
      - 'warp.dev'
      - 'github.com'
      - 'gitlab.com'
      - 'anthropic.com'
      - 'openai.com'
  condition: selection and not filter
falsepositives:
  - Warp updates or plugin downloads
  - Legitimate AI API calls to Anthropic/OpenAI (if using custom agents)
level: high

// Hunt for Warp process spawning shells or making unusual network connections
let WarpProcesses = DeviceProcessEvents
| where TimeGenerated > ago(7d)
| where FileName has_any ("warp", "Warp", "warp-terminal")
| project DeviceId, ProcessId, TimeGenerated, FileName, ProcessCommandLine;
// Check for Warp spawning command shells (potential interactive exfil)
let SuspiciousChildren = DeviceProcessEvents
| where TimeGenerated > ago(7d)
| where InitiatingProcessId in (WarpProcesses | project ProcessId)
| where FileName in~ ("bash", "sh", "zsh", "python", "curl", "wget")
| project DeviceId, InitiatingProcessId, ProcessId, TimeGenerated, FileName, ProcessCommandLine;
// Check for large outbound transfers (potential exfil of agent logs)
let NetworkExfil = DeviceNetworkEvents
| where TimeGenerated > ago(7d)
| where InitiatingProcessFileName has_any ("warp", "Warp")
| where RemotePort in (80, 443)
| where RemoteUrl !contains "warp.dev" // Filter legitimate Warp telemetry
| summarize TotalBytesSent = sum(SentBytes), TotalBytesReceived = sum(ReceivedBytes) by DeviceId, RemoteUrl, RemoteIP
| where TotalBytesSent > 1048576; // >1MB threshold
// Correlate
SuspiciousChildren
| join kind=inner NetworkExfil on DeviceId
| project TimeGenerated, DeviceId, FileName, ProcessCommandLine, RemoteUrl, TotalBytesSent
| order by TimeGenerated desc

-- Hunt for Warp agent logs and check for suspicious access/modification
LET LogPaths = SELECT FullPath, Mtime, Atime, Size
FROM glob(globs=['/home/*/.warp/**', '/Users/*/Library/Application Support/warp/**', '/var/log/warp/**'])
WHERE FullPath =~ 'agent|telemetry|log'

LET SuspiciousAccess = SELECT 
  FullPath,
  Mtime,
  Atime,
  Size,
  -- Check if accessed recently (last 7 days) but modified long ago (potential staging)
  (timestamp(epoch=now()) - timestamp(epoch=Atime)) / 86400 AS DaysSinceAccess,
  (timestamp(epoch=now()) - timestamp(epoch=Mtime)) / 86400 AS DaysSinceModified
FROM LogPaths
WHERE DaysSinceAccess < 7 AND DaysSinceModified > 30

SELECT * FROM SuspiciousAccess

# Warp Agent Log Security Audit - PowerShell
# Run on developer workstations to check for sensitive data in logs and enforce privacy settings

Write-Host "[+] Auditing Warp AI Agent Logs for Sensitive Data Exposure" -ForegroundColor Cyan

# Define log paths
$LogPaths = @(
    "$env:USERPROFILE\.warp\logs",
    "$env:LOCALAPPDATA\warp\logs",
    "$env:APPDATA\warp\telemetry"
)

# Patterns indicating potential secret exposure in agent logs
$SensitivePatterns = @(
    "api[_-]?key",
    "secret[_-]?key",
    "password",
    "token",
    "aws[_-]?access",
    "private[_-]?key",
    "BEGIN.*PRIVATE.*KEY"
)

$Findings = @()

foreach ($Path in $LogPaths) {
    if (Test-Path $Path) {
        Write-Host "[*] Scanning: $Path" -ForegroundColor Yellow
        
        # Get log files modified in last 30 days
        $LogFiles = Get-ChildItem -Path $Path -Recurse -File -ErrorAction SilentlyContinue | 
            Where-Object { $_.LastWriteTime -gt (Get-Date).AddDays(-30) }
        
        foreach ($File in $LogFiles) {
            $Content = Get-Content $File.FullName -Raw -ErrorAction SilentlyContinue
            foreach ($Pattern in $SensitivePatterns) {
                if ($Content -match $Pattern) {
                    $Findings += [PSCustomObject]@{
                        File = $File.FullName
                        Pattern = $Pattern
                        LastModified = $File.LastWriteTime
                        SizeKB = [math]::Round($File.Length/1KB, 2)
                    }
                    Write-Host "[!] ALERT: Potential sensitive data in $($File.Name) - Pattern: $Pattern" -ForegroundColor Red
                }
            }
        }
    }
}

# Check Warp telemetry settings (if accessible via CLI or config)
Write-Host "`n[+] Checking Warp Configuration for Telemetry Settings" -ForegroundColor Cyan
$WarpConfig = "$env:USERPROFILE\.warp\config.toml" # Adjust based on actual config format

if (Test-Path $WarpConfig) {
    $ConfigContent = Get-Content $WarpConfig -Raw
    if ($ConfigContent -match "telemetry.*=.*true") {
        Write-Host "[!] WARNING: Telemetry appears to be enabled. Consider disabling if not required." -ForegroundColor Red
        Write-Host "    Review: $WarpConfig" -ForegroundColor Yellow
    } else {
        Write-Host "[OK] Telemetry settings appear restrictive" -ForegroundColor Green
    }
}

# Export findings
if ($Findings.Count -gt 0) {
    $Findings | Export-Csv -Path ".\warp_log_audit_$(Get-Date -Format 'yyyyMMdd').csv" -NoTypeInformation
    Write-Host "`n[!] Found $($Findings.Count) potential exposures. Report exported to warp_log_audit_$(Get-Date -Format 'yyyyMMdd').csv" -ForegroundColor Red
    Write-Host "    ACTION REQUIRED: Rotate any exposed credentials immediately." -ForegroundColor Red
} else {
    Write-Host "`n[OK] No obvious sensitive patterns detected in recent logs." -ForegroundColor Green
}

Write-Host "`n[+] Recommendations:" -ForegroundColor Cyan
Write-Host "    1. Rotate all API keys and secrets referenced in agent workflows"
Write-Host "    2. Review Warp's vendor security advisory for specific remediation steps"
Write-Host "    3. Consider disabling AI agent decision logging if not essential for operations"
Write-Host "    4. Implement DLP rules to prevent credential entry into agent context windows"

#!/bin/bash
# Warp Agent Log Audit Script - Linux/macOS

echo "[+] Auditing Warp Installation for Sensitive Data Exposure"

LOG_PATHS=("$HOME/.warp/logs" "$HOME/Library/Application Support/warp/logs")
SENSITIVE_PATTERNS=("api[_-]key" "secret[_-]key" "password" "BEGIN.*PRIVATE.*KEY" "aws[_-]access")

findings=0

for path in "${LOG_PATHS[@]}"; do
    if [ -d "$path" ]; then
        echo "[*] Scanning: $path"
        # Find log files modified in last 30 days
        find "$path" -type f -mtime -30 -name "*.log" -o -name "*.json" 2>/dev/null | while read -r file; do
            for pattern in "${SENSITIVE_PATTERNS[@]}"; do
                if grep -qi "$pattern" "$file" 2>/dev/null; then
                    echo "[!] ALERT: Sensitive pattern '$pattern' found in: $file"
                    ((findings++))
                fi
            done
        done
    fi
done

if [ $findings -gt 0 ]; then
    echo "[!] Found $findings potential exposures. Immediate credential rotation recommended."
else
    echo "[OK] No obvious sensitive patterns detected."
fi

# Check for suspicious outbound connections from Warp processes
echo "[+] Checking for active network connections from Warp processes..."
if command -v lsof >/dev/null 2>&1; then
    lsof -i -n | grep -i warp | grep -E '(ESTABLISHED|SYN_SENT)' || echo "[OK] No suspicious active connections found."
else
    netstat -an | grep -E '(443|80)' | grep ESTABLISHED | head -5 || echo "[OK] No suspicious connections found."
fi