CVE-2022-2145 Cloudlfare WARP Arbitrary File Overwrite

HighCVSS 7.8 EPSS 0.30%

Published: 2022-06-28 20:45
Updated: 2026-06-17 07:41
Exploit status: No public exploit known

Description

Cloudflare WARP client for Windows (up to v. 2022.5.309.0) allowed creation of mount points from its ProgramData folder. During installation of the WARP client, it was possible to escalate privileges and overwrite SYSTEM protected files.

Affected products

Product	Affected versions	Fixed in
cloudflare WARP	< 2022.5.309.0	2022.5.309.0

References

github.com release-notes third-party-advisory

CVSS v3.1

7.8 High

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector: Local
Attack Complexity: Low
Privileges Required: Low
User Interaction: None
Scope: Unchanged
Confidentiality: High
Integrity: High
Availability: High

All scores (4)

v3.1 7.8 · nvd@nist.gov
v3.1 5.8 · cloudflare
v3.1 5.8 · cna@cloudflare.com
v2.0 7.2 · nvd@nist.gov

Weakness & likelihood

EPSS (exploitation probability, 30 days): 0.30% (percentile 23.2)
CWE: CWE-20 Improper Input Validation CWE-59 Improper Link Resolution Before File Access ('Link Following')

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

No public exploit references known.