Skip to content
Fatpipe Warp vulnerabilities
-
fatpipe warp
NVIDIA Warp contains a vulnerability where an attacker could cause a heap-based buffer overflow....
CVE-2026-67456
4.4 Medium
-
fatpipe ipvpn, mpvpn, warp +2 more
FatPipe MPVPN, WARP, and IPVPN appliances running the end-of-life firmware version 10.1.2r60p100...
CVE-2026-90823
9.8 Critical
-
fatpipe ipvpn, mpvpn, warp +2 more
FatPipe MPVPN, WARP, and IPVPN appliances running the end-of-life firmware version 10.1.2r60p100...
CVE-2026-90822
9.8 Critical
-
fatpipe warp
Warp Markdown notebook links may open executable local files
CVE-2026-48704
8.8 High
-
fatpipe warp
Warp branch selector command injection via Git branch names
CVE-2026-48719
8.0 High
-
fatpipe warp
Warp: SSH remote output can lead to local file overwrite and persistence
CVE-2026-48720
8.8 High
-
fatpipe warp
Warp: Env-var prefixes can lead to denylisted command autoexecution
CVE-2026-48721
8.6 High
-
fatpipe warp
Warp: Linux external editor command injection
CVE-2026-48731
7.8 High
-
fatpipe warp
Warp: Remote SSH cwd can lead to unauthorized remote command execution
CVE-2026-48732
Public exploit
8.8 High
-
fatpipe warp
Warp: DCS lifecycle hook spoofing can alter terminal session metadata
CVE-2026-54686
Public exploit
4.3 Medium
-
fatpipe warp
Warp: OS command injection when opening terminal links from WSL
CVE-2026-54699
7.7 High
-
fatpipe warp
Warp: Command Injection via Warp code search tool arguments
CVE-2026-48703
7.8 High
-
fatpipe warp
Warp may allow terminal output to access the local clipboard through OSC 52
CVE-2026-48725
8.1 High
-
cloudflare warp
File symlink abuse might lead to deleting files belonging to SYSTEM user
CVE-2025-0651
Public exploit
6.1 Medium
-
cloudflare warp
Plaintext transmission of DNS requests in Windows 1.1.1.1 WARP client
CVE-2023-2754
7.4 High
-
cloudflare warp
Local Privilege Escalation in Cloudflare WARP Installer (Windows)
CVE-2023-0652
7.0 High
-
cloudflare warp
Local Privilege Escalation Vulnerability in WARP's MSI Installer
CVE-2023-1412
7.0 High
-
cloudflare warp
support_uri validation missing in WARP client for Windows
CVE-2022-4428
8.9 High
-
cloudflare warp
WARP client manifest misconfiguration leading to Task Hijacking
CVE-2022-4457
5.5 Medium
-
cloudflare warp
Bypassing Cloudflare Zero Trust policies using warp-cli set-custom-endpoint command
CVE-2022-3320
6.7 Medium
-
cloudflare warp, warp mobile client +1 more
Lock WARP switch bypass on WARP mobile client using iOS quick action
CVE-2022-3322
6.7 Medium
-
cloudflare warp, warp mobile client +1 more
Lock WARP switch bypass by removing VPN profile on iOS mobile client
CVE-2022-3337
6.7 Medium
-
cloudflare warp, warp mobile client +1 more
Lock WARP switch feature bypass on WARP mobile client for iOS
CVE-2022-3321
6.7 Medium
-
cloudflare warp
Lock WARP switch bypass using warp-cli 'add-trusted-ssid' command
CVE-2022-3512
6.7 Medium
-
cloudflare warp
Zero Trust Secure Web Gateway policies bypass using WARP client subcommands
CVE-2022-2225
8.1 High
-
cloudflare warp
Cloudlfare WARP Arbitrary File Overwrite
CVE-2022-2145
5.8 Medium
-
cloudflare warp
Unquoted Service Path in Cloudflare WARP for Windows
CVE-2022-2147
6.5 Medium
-
fatpipe ipvpn, mpvpn, warp +3 more +5 more
Missing authorization vulnerability in FatPipe software
CVE-2021-27859
8.8 High
-
fatpipe ipvpn, mpvpn, warp +3 more +5 more
Missing authorization vulnerability in FatPipe software
CVE-2021-27858
5.3 Medium
-
fatpipe ipvpn, mpvpn, warp +3 more +5 more
FatPipe software allows unauthenticated configuration download
CVE-2021-27857
7.5 High
-
fatpipe ipvpn, mpvpn, warp +3 more +5 more
FatPipe software administrative account with no password
CVE-2021-27856
9.8 Critical
-
fatpipe ipvpn, mpvpn, warp +3 more +5 more
FatPipe software allows privilege escalation
CVE-2021-27855
8.8 High
-
fatpipe ipvpn, mpvpn, warp +4 more +6 more
Arbitrary file upload vulnerability in FatPipe software
CVE-2021-27860
In KEV
EPSS 39.7%
9.8 Critical