Cloudflare Warp vulnerabilities

• cloudflare warp File symlink abuse might lead to deleting files belonging to SYSTEM user CVE-2025-0651 Public exploit 6.1 MediumJanuary 22, 2025
• cloudflare warp, warp client +1 more Insufficient Validation on Override Codes for Always-Enabled WARP Mode CVE-2023-3747 5.5 MediumSeptember 7, 2023
• cloudflare warp, warp client +1 more Spoofing User's Activity Loads in WARP Mobile Client (Android) CVE-2023-0654 3.9 LowAugust 29, 2023
• cloudflare warp, warp client +1 more Injecting Activity Loads in WARP Mobile Client CVE-2023-0238 3.9 LowAugust 29, 2023
• cloudflare warp Plaintext transmission of DNS requests in Windows 1.1.1.1 WARP client CVE-2023-2754 7.4 HighAugust 3, 2023
• cloudflare warp, warp client +1 more Remote access to warp-svc.exe in Cloudflare WARP CVE-2023-1862 7.3 HighJune 20, 2023
• cloudflare warp Local Privilege Escalation in Cloudflare WARP Installer (Windows) CVE-2023-0652 7.0 HighApril 6, 2023
• cloudflare warp Local Privilege Escalation Vulnerability in WARP's MSI Installer CVE-2023-1412 7.0 HighApril 5, 2023
• cloudflare warp support_uri validation missing in WARP client for Windows CVE-2022-4428 8.9 HighJanuary 11, 2023
• cloudflare warp WARP client manifest misconfiguration leading to Task Hijacking CVE-2022-4457 5.5 MediumJanuary 11, 2023
• cloudflare warp Bypassing Cloudflare Zero Trust policies using warp-cli set-custom-endpoint command CVE-2022-3320 6.7 MediumOctober 28, 2022
• cloudflare warp, warp mobile client +1 more Lock WARP switch bypass on WARP mobile client using iOS quick action CVE-2022-3322 6.7 MediumOctober 28, 2022
• cloudflare warp, warp mobile client +1 more Lock WARP switch bypass by removing VPN profile on iOS mobile client CVE-2022-3337 6.7 MediumOctober 28, 2022
• cloudflare warp, warp mobile client +1 more Lock WARP switch feature bypass on WARP mobile client for iOS CVE-2022-3321 6.7 MediumOctober 28, 2022
• cloudflare warp Lock WARP switch bypass using warp-cli 'add-trusted-ssid' command CVE-2022-3512 6.7 MediumOctober 28, 2022
• cloudflare warp Zero Trust Secure Web Gateway policies bypass using WARP client subcommands CVE-2022-2225 8.1 HighJuly 26, 2022
• cloudflare warp Cloudlfare WARP Arbitrary File Overwrite CVE-2022-2145 5.8 MediumJune 28, 2022
• cloudflare warp Unquoted Service Path in Cloudflare WARP for Windows CVE-2022-2147 6.5 MediumJune 23, 2022
• cloudflare warp for windows, warp +1 more Privilege escalation through unquoted service binary path on Cloudflare WARP for Windows CVE-2020-35152 4.5 MediumFebruary 2, 2021