CVE-2022-3512: Lock WARP switch bypass using warp-cli 'add-trusted-ssid' command

Severity: high (CVSS 8.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-10-28 · updated 2026-06-17
Weakness: CWE-862

Description

Using warp-cli command "add-trusted-ssid", a user was able to disconnect WARP client and bypass the "Lock WARP switch" feature resulting in Zero Trust policies not being enforced on an affected endpoint.

Affected products

Cloudflare WARP: before 2022.8.857.0; before 2022.8.861.0; before 2022.8.936 — fixed in 2022.8.857.0, 2022.8.861.0, 2022.8.936

How to fix

Upgrade to a fixed version: Cloudflare WARP 2022.8.857.0, 2022.8.861.0, 2022.8.936. Check the vendor advisory for mitigations.

References

https://github.com/cloudflare/advisories/security/advisories/GHSA-3868-hwjx-r5xf
https://github.com/cloudflare/advisories/security/advisories/GHSA-3868-hwjx-r5xf

Get alerted when CVE-2022-3512 or the next vulnerability affects your stack