CVE Feed

    Dashboard / CVE / CVE-2025-0651

    CVE-2025-0651

    Improper Privilege Management vulnerability in Cloudflare WARP on Windows allows File Manipulation. User with a low system privileges  can create a set of symlinks inside the C:\ProgramData\Cloudflare\warp-diag-partials folder. After triggering the 'Reset all settings" option the WARP service will delete the files that the symlink was pointing to. Given the WARP service operates with System privileges this might lead to deleting files owned by the System user. This issue affects WARP: before 2024.12.492.0.

    Published:Jan 22, 2025
    Last Modified:Jul 31, 2025
    EPS:Jan 22, 2025
    EPSS Score:0.0006
    CVSS Score:7.1

    Affected Products

    Vendor
    Cloudflare
    Product
    Warp

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-269 Improper Privilege Management

    Related CVEs

    CVE-2023-3747 (CVSS 5.5) — Zero Trust Administrators have the ability to disallow end users from disabling WARP on their devices. Overrid…
    CVE-2023-0654 (CVSS 3.9) — Due to a misconfiguration, the WARP Mobile Client (< 6.29) for Android was susceptible to a tapjacking attack.…
    CVE-2023-0238 (CVSS 3.9) — Due to lack of a security policy, the WARP Mobile Client (<=6.29) for Android was susceptible to this vulnerab…
    CVE-2023-2754 (CVSS 7.4) — The Cloudflare WARP client for Windows assigns loopback IPv4 addresses for the DNS Servers, since WARP acts as…
    CVE-2023-1862 (CVSS 7.3) — Cloudflare WARP client for Windows (up to v2023.3.381.0) allowed a malicious actor to remotely access the warp…
    CVE-2023-0652 (CVSS 7) — Due to a hardlink created in the ProgramData folder during the repair process of the software, the installer (…
    CVE-2023-1412 (CVSS 7) — An unprivileged (non-admin) user can exploit an Improper Access Control vulnerability in the Cloudflare WARP C…
    CVE-2022-4428 (CVSS 8.9) — support_uri parameter in the WARP client local settings file (mdm.xml) lacked proper validation which allowed …
    CVE-2022-4457 (CVSS 5.5) — Due to a misconfiguration in the manifest file of the WARP client for Android, it was possible to a perform a …
    CVE-2022-3320 (CVSS 6.7) — It was possible to bypass policies configured for Zero Trust Secure Web Gateway by using warp-cli 'set-custom-…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High