CVE-2022-3512

HIGH 8.8CVE-2022-3512 · Published 28/10/2022 · updated 17/06/2026

In short

CVE-2022-3512 is a HIGH (CVSS 8.8) vulnerability affecting warp (cloudflare).
Chance of exploitation in the next 30 days (EPSS): 0.46%, higher than 39.9% of all vulnerabilities.
Fix: update to 2022.8.857.0, 2022.8.861.0, 2022.8.936 or later.

Package	Affected versions	Patched versions
warp cloudflare	`< 2022.8.857.0< 2022.8.861.0< 2022.8.936`	`2022.8.857.02022.8.861.02022.8.936`

Description

Using warp-cli command "add-trusted-ssid", a user was able to disconnect WARP client and bypass the "Lock WARP switch" feature resulting in Zero Trust policies not being enforced on an affected endpoint.

References

cloudflare/advisories security advisory · Third Party Advisory

More vulnerabilities in warp

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

warp

cloudflare

< 2022.8.857.0< 2022.8.861.0< 2022.8.936

2022.8.857.02022.8.861.02022.8.936

More vulnerabilities in warp

See all →