CVE-2022-2225

HIGH

Cloudflare WARP < 2022.5.227.0, < 2022.5.341.0, < 2022.5.346 - Zero Trust Policy Bypass via warp-cli

Title source: llm
STIX 2.1

Description

By using warp-cli subcommands (disable-ethernet, disable-wifi), it was possible for a user without admin privileges to bypass configured Zero Trust security policies (e.g. Secure Web Gateway policies) and features such as 'Lock WARP switch'.

References (1)

Core 1
Core References

Scores

CVSS v3 8.1
EPSS 0.0019
EPSS Percentile 8.3%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:H/A:H

Details

CWE
CWE-284
Status published
Products (3)
cloudflare/warp < 2022.5.227.0
cloudflare/warp < 2022.5.341.0
cloudflare/warp < 2022.5.346
Published Jul 26, 2022
Tracked Since Feb 18, 2026