Skip to content
OpenAdvisories
Medium · 6.7 CVE-2022-3512 EUVD-2022-42881

Lock WARP switch bypass using warp-cli 'add-trusted-ssid' command

Published Oct 28, 2022 · Updated May 6, 2025 · Assigned by cloudflare

Description

Using warp-cli command "add-trusted-ssid", a user was able to disconnect WARP client and bypass the "Lock WARP switch" feature resulting in Zero Trust policies not being enforced on an affected endpoint.

Affected products

VendorProductAffectedFixed
Cloudflare WARP < 2022.8.857, < 2022.8.936, < 2022.8.861 2022.8.857

References