CVE-2022-2145: Cloudflare WARP

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

Cloudflare WARP client for Windows (up to v. 2022.5.309.0) allowed creation of mount points from its ProgramData folder. During installation of the WARP client, it was possible to escalate privileges and overwrite SYSTEM protected files.

Affected products

• Cloudflare WARP: before 2022.5.309.0 (fixed in 2022.5.309.0)

Published 2022-06-28. Last modified 2026-06-17.