Cloudlfare WARP Arbitrary File Overwrite
Priority LOW 34CWE-20Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA.
Summary
Cloudflare WARP client for Windows (up to v. 2022.5.309.0) allowed creation of mount points from its ProgramData folder. During installation of the WARP client, it was possible to escalate privileges and overwrite SYSTEM protected files.
Why it matters now
EPSS 0.00301 22nd percentileScored 2026-11-07
Fix Fixed WARP (Cloudflare): 2022.5.309.0
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Cloudflare | WARP | before 2022.5.309.0 | 2022.5.309.0 | Patch available | CNA |
- WARP VendorCloudflare Affected before 2022.5.309.0 Fixed in 2022.5.309.0 Patch available CNA
CPE configurations NVD · 1
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:cloudflare:warp:*:*:*:*:*:windows:*:* | before 2022.5.309.0 | Vulnerable | Cloudflare |
- cpe:2.3:a:cloudflare:warp:*:*:*:*:*:windows:*:* Versions before 2022.5.309.0 Vulnerable ·Cloudflare
Remediation
- Fix · CNA WARP (Cloudflare) Fixed in 2022.5.309.0
Timeline
- 2026-10-02 Threatist record created from CVE-2022-2145
- 2026-10-03 Alias added: GHSA-7crm-h967-f3pf
References
More Cloudflare Warp vulnerabilities
- TI-2022-04046 support_uri validation missing in WARP client for Windows CVSS 3.1HIGH 8.9
- TI-2022-03068 Bypassing Cloudflare Zero Trust policies using warp-cli set-custom-endpoint command CVSS 3.1CRITICAL 9.8
- TI-2023-01749 Remote access to warp-svc.exe in Cloudflare WARP CVSS 3.1HIGH 7.3
- TI-2022-03240 Lock WARP switch bypass using warp-cli 'add-trusted-ssid' command CVSS 3.1HIGH 8.8
- TI-2023-02579 Plaintext transmission of DNS requests in Windows 1.1.1.1 WARP client CVSS 3.1HIGH 7.4
- TI-2023-01335 Local Privilege Escalation Vulnerability in WARP's MSI Installer CVSS 3.1HIGH 7.8
Sources
- CVE-2022-2145 · CVE Program
- CVE-2022-2145 · NVD
- FIRST EPSS
- GHSA-7crm-h967-f3pf · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences