Lock WARP switch bypass using warp-cli 'add-trusted-ssid' command

Lock WARP switch bypass by removing VPN profile on iOS mobile client

Lock WARP switch feature bypass on WARP mobile client for iOS

support_uri parameter in the WARP client local settings file (mdm.xml) lacked proper validation which allowed for privilege escalation and launching an arbitrary executable on the…

Due to a hardlink created in the ProgramData folder during the repair process of the software, the installer (MSI) of WARP Client for Windows (<= 2022.12.582.0) allowed a…

An unprivileged (non-admin) user can exploit an Improper Access Control vulnerability in the Cloudflare WARP Client for Windows (<= 2022.12.582.0) to perform privileged operations…

By using warp-cli subcommands (disable-ethernet, disable-wifi), it was possible for a user without admin privileges to bypass configured Zero Trust security policies (e.g

Cloudflare WARP client for Windows (up to v

Cloudflare Warp for Windows from version 2022.2.95.0 contained an unquoted service path which enables arbitrary code execution leading to privilege escalation

Cloudflare WARP for Windows allows privilege escalation due to an unquoted service path

Lock WARP switch bypass on WARP mobile client using iOS quick action

Cloudflare WARP client for Windows (up to v2023.3.381.0) allowed a malicious actor to remotely access the warp-svc.exe binary due to an insufficient access control policy on an…

File symlink abuse might lead to deleting files belonging to SYSTEM user