{
  "product": "Cloudflare WARP",
  "url": "https://patchblox.com/security/product/windows-app/cloudflare-warp",
  "summary": "The latest version of Cloudflare WARP is 26.8.2115.0, released October 20, 2026. Patch Radar has 0 security fixes for Cloudflare WARP, closing 0 CVEs. 10 CVEs have no fix yet.",
  "platform": "windows-app",
  "vendor": "Cloudflare",
  "supported": true,
  "latestVersion": "26.8.2115.0",
  "latestReleased": "2026-10-20T00:00:00Z",
  "fixCount": 0,
  "cveCount": 0,
  "exploitedCveCount": 0,
  "unfixedCveCount": 10,
  "fixes": [],
  "noFixYet": [
    {
      "cveId": "CVE-2022-3320",
      "url": "https://patchblox.com/security/cve/CVE-2022-3320",
      "title": "Bypassing Cloudflare Zero Trust policies using warp-cli set-custom-endpoint command",
      "priority": "Urgent",
      "status": "no-fix",
      "affectedVersion": "26.8.2115.0"
    },
    {
      "cveId": "CVE-2022-2145",
      "url": "https://patchblox.com/security/cve/CVE-2022-2145",
      "title": "Cloudlfare WARP Arbitrary File Overwrite",
      "priority": "High",
      "status": "no-fix",
      "affectedVersion": "26.8.2115.0"
    },
    {
      "cveId": "CVE-2022-2225",
      "url": "https://patchblox.com/security/cve/CVE-2022-2225",
      "title": "Zero Trust Secure Web Gateway policies bypass using WARP client subcommands",
      "priority": "High",
      "status": "no-fix",
      "affectedVersion": "26.8.2115.0"
    },
    {
      "cveId": "CVE-2022-3512",
      "url": "https://patchblox.com/security/cve/CVE-2022-3512",
      "title": "Lock WARP switch bypass using warp-cli \u0027add-trusted-ssid\u0027 command",
      "priority": "High",
      "status": "no-fix",
      "affectedVersion": "26.8.2115.0"
    },
    {
      "cveId": "CVE-2022-4428",
      "url": "https://patchblox.com/security/cve/CVE-2022-4428",
      "title": "support_uri validation missing in WARP client for Windows",
      "priority": "High",
      "status": "no-fix",
      "affectedVersion": "26.8.2115.0"
    },
    {
      "cveId": "CVE-2023-0652",
      "url": "https://patchblox.com/security/cve/CVE-2023-0652",
      "title": "Local Privilege Escalation in Cloudflare WARP Installer (Windows)",
      "priority": "High",
      "status": "no-fix",
      "affectedVersion": "26.8.2115.0"
    },
    {
      "cveId": "CVE-2023-1412",
      "url": "https://patchblox.com/security/cve/CVE-2023-1412",
      "title": "Local Privilege Escalation Vulnerability in WARP\u0027s MSI Installer",
      "priority": "High",
      "status": "no-fix",
      "affectedVersion": "26.8.2115.0"
    },
    {
      "cveId": "CVE-2023-1862",
      "url": "https://patchblox.com/security/cve/CVE-2023-1862",
      "title": "Remote access to warp-svc.exe in Cloudflare WARP",
      "priority": "High",
      "status": "no-fix",
      "affectedVersion": "26.8.2115.0"
    },
    {
      "cveId": "CVE-2023-2754",
      "url": "https://patchblox.com/security/cve/CVE-2023-2754",
      "title": "Plaintext transmission of DNS requests in Windows 1.1.1.1 WARP client",
      "priority": "Routine",
      "status": "no-fix",
      "affectedVersion": "26.8.2115.0"
    },
    {
      "cveId": "CVE-2025-0651",
      "url": "https://patchblox.com/security/cve/CVE-2025-0651",
      "title": "File symlink abuse might lead to deleting files belonging to SYSTEM user",
      "priority": "Routine",
      "status": "no-fix",
      "affectedVersion": "26.8.2115.0"
    }
  ],
  "dataAsOf": "2026-11-09T19:38:12Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}