CVE-2022-3512

Using warp-cli command "add-trusted-ssid", a user was able to disconnect WARP client and bypass the "Lock WARP switch" feature resulting in Zero Trust policies not being enforced on an affected endpoint.

Score

CVSS 3.1 8.8 High

Status

Modified - cna@cloudflare.com

Published

2022-10-28

Last modified

2025-05-06

Weaknesses

CWE-862

Affected products

• Warp (Cloudflare)

References

• https://github.com/cloudflare/advisories/security/advisories/GHSA-3868-hwjx-r5xf