CVE-2022-3512

8.8 highEPSS 0.5%

High (8.8) in cloudflare warp. EPSS 0.5% chance of exploitation in the next 30 days.

Using warp-cli command "add-trusted-ssid", a user was able to disconnect WARP client and bypass the "Lock WARP switch" feature resulting in Zero Trust policies not being enforced on an affected endpoint.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 39% of CVEs (scores of 2026-10-31)
CWE: CWE-862
Published: 2022-10-28
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

cloudflare:warp

References

https://github.com/cloudflare/advisories/security/advisories/GHSA-3868-hwjx-r5xf
https://github.com/cloudflare/advisories/security/advisories/GHSA-3868-hwjx-r5xf

Check your stack JSON