CVE-2025-0651

HIGH

Cloudflare WARP <20 - Privilege Escalation

Title source: llm
STIX 2.1

Description

Improper Privilege Management vulnerability in Cloudflare WARP on Windows allows File Manipulation. User with a low system privileges  can create a set of symlinks inside the C:\ProgramData\Cloudflare\warp-diag-partials folder. After triggering the 'Reset all settings" option the WARP service will delete the files that the symlink was pointing to. Given the WARP service operates with System privileges this might lead to deleting files owned by the System user. This issue affects WARP: before 2024.12.492.0.

References (1)

Core 1

Scores

CVSS v3 7.1
EPSS 0.0028
EPSS Percentile 19.5%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-269
Status published
Products (1)
cloudflare/warp < 2024.12.492.0
Published Jan 22, 2025
Tracked Since Feb 18, 2026