Windows apps · Cloudflare
Cloudflare WARP security updates
The latest version of Cloudflare WARP is 26.8.2115.0, released October 20, 2026. Patch Radar has 0 security fixes for Cloudflare WARP, closing 0 CVEs. 10 CVEs have no fix yet.
10 with no fix yet
Latest version
26.8.2115.0
Released Oct 20, 2026
Security fixes
0
On record in Patch Radar
CVEs
0
Closed by those fixes
Exploited
0
Vendor report or CISA KEV
CVEs with no fix yet
| Priority | CVE | Title | Status |
|---|---|---|---|
| Urgent | CVE-2022-3320 | Bypassing Cloudflare Zero Trust policies using warp-cli set-custom-endpoint command | no-fix |
| High | CVE-2022-2145 | Cloudlfare WARP Arbitrary File Overwrite | no-fix |
| High | CVE-2022-2225 | Zero Trust Secure Web Gateway policies bypass using WARP client subcommands | no-fix |
| High | CVE-2022-3512 | Lock WARP switch bypass using warp-cli 'add-trusted-ssid' command | no-fix |
| High | CVE-2022-4428 | support_uri validation missing in WARP client for Windows | no-fix |
| High | CVE-2023-0652 | Local Privilege Escalation in Cloudflare WARP Installer (Windows) | no-fix |
| High | CVE-2023-1412 | Local Privilege Escalation Vulnerability in WARP's MSI Installer | no-fix |
| High | CVE-2023-1862 | Remote access to warp-svc.exe in Cloudflare WARP | no-fix |
| Routine | CVE-2023-2754 | Plaintext transmission of DNS requests in Windows 1.1.1.1 WARP client | no-fix |
| Routine | CVE-2025-0651 | File symlink abuse might lead to deleting files belonging to SYSTEM user | no-fix |
Security fixes, newest first
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.