TI-2025-00548 CVE-2025-0651 · GHSA-9g4q-mq35-ffg3
File symlink abuse might lead to deleting files belonging to SYSTEM user
Priority LOW 29
Improper Privilege Management vulnerability in Cloudflare WARP on Windows allows File Manipulation.
Vulnerabilities
16 records
Priority LOW 24
Zero Trust Administrators have the ability to disallow end users from disabling WARP on their devices.
Priority LOW 18
Due to a misconfiguration, the WARP Mobile Client (< 6.29) for Android was susceptible to a tapjacking attack.
Priority LOW 24
Due to lack of a security policy, the WARP Mobile Client (<=6.29) for Android was susceptible to this vulnerability which allowed a malicious app installed on a victim's device to exploit a peculiarity in an Android func…
Priority LOW 36
The Cloudflare WARP client for Windows assigns loopback IPv4 addresses for the DNS Servers, since WARP acts as local DNS server that performs DNS queries in a secure manner, however, if a user is connected to WARP over a…
Priority LOW 39
Cloudflare WARP client for Windows (up to v2023.3.381.0) allowed a malicious actor to remotely access the warp-svc.exe binary due to an insufficient access control policy on an IPC Named Pipe.
Priority LOW 36
Due to a hardlink created in the ProgramData folder during the repair process of the software, the installer (MSI) of WARP Client for Windows (<= 2022.12.582.0) allowed a malicious attacker to forge the destination of th…
Priority LOW 36
An unprivileged (non-admin) user can exploit an Improper Access Control vulnerability in the Cloudflare WARP Client for Windows (<= 2022.12.582.0) to perform privileged operations with SYSTEM context by working with a co…
Priority MEDIUM 42
support_uri parameter in the WARP client local settings file (mdm.xml) lacked proper validation which allowed for privilege escalation and launching an arbitrary executable on the local machine upon clicking on the "Send…
Priority LOW 24
Due to a misconfiguration in the manifest file of the WARP client for Android, it was possible to a perform a task hijacking attack.
TI-2022-03068 CVE-2022-3320
Bypassing Cloudflare Zero Trust policies using warp-cli set-custom-endpoint command
Priority MEDIUM 42
It was possible to bypass policies configured for Zero Trust Secure Web Gateway by using warp-cli 'set-custom-endpoint' subcommand.
Priority LOW 38
Using warp-cli command "add-trusted-ssid", a user was able to disconnect WARP client and bypass the "Lock WARP switch" feature resulting in Zero Trust policies not being enforced on an affected endpoint.
TI-2022-02054 CVE-2022-2225 · GHSA-f3c3-7x6f-c89r
Zero Trust Secure Web Gateway policies bypass using WARP client subcommands
Priority LOW 35
By using warp-cli subcommands (disable-ethernet, disable-wifi), it was possible for a user without admin privileges to bypass configured Zero Trust security policies (e.g.
TI-2022-01986 CVE-2022-2145 · GHSA-7crm-h967-f3pf
Cloudlfare WARP Arbitrary File Overwrite
Priority LOW 34
Cloudflare WARP client for Windows (up to v.
TI-2022-01988 CVE-2022-2147 · GHSA-frq6-c9vg-hmxj
Unquoted Service Path in Cloudflare WARP for Windows
Priority LOW 34
Cloudflare Warp for Windows from version 2022.2.95.0 contained an unquoted service path which enables arbitrary code execution leading to privilege escalation.
TI-2020-17854 CVE-2020-35152
Privilege escalation through unquoted service binary path on Cloudflare WARP for Windows
Priority LOW 34
Cloudflare WARP for Windows allows privilege escalation due to an unquoted service path.