CVE-2023-0652

HIGH 7.8CVE-2023-0652 · Published 06/04/2023 · updated 17/06/2026

In short

CVE-2023-0652 is a HIGH (CVSS 7.8) vulnerability affecting warp (cloudflare).
Chance of exploitation in the next 30 days (EPSS): 0.29%, higher than 21.5% of all vulnerabilities.
Fix: update to 2023.3.381.0 or later.

Package	Affected versions	Patched versions
warp cloudflare	`< 2023.3.381.0`	`2023.3.381.0`

Description

Due to a hardlink created in the ProgramData folder during the repair process of the software, the installer (MSI) of WARP Client for Windows (<= 2022.12.582.0) allowed a malicious attacker to forge the destination of the hardlink and escalate privileges, overwriting SYSTEM protected files. As Cloudflare WARP client for Windows (up to version 2022.5.309.0) allowed creation of mount points from its ProgramData folder, during installation of the WARP client, it was possible to escalate privileges and overwrite SYSTEM protected files.

References

developers.cloudflare.com/warp-client/get-started/windows · Product
cloudflare/advisories security advisory · Vendor Advisory
install.appcenter.ms/orgs/cloudflare/apps/1.1.1.1-windows-1/distribution_groups/release · Release Notes

More vulnerabilities in warp

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

warp

cloudflare

< 2023.3.381.0

2023.3.381.0

Description

More vulnerabilities in warp

See all →