CVE-2022-2147: Cloudflare WARP

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

Cloudflare Warp for Windows from version 2022.2.95.0 contained an unquoted service path which enables arbitrary code execution leading to privilege escalation. The fix was released in version 2022.3.186.0.

Affected products

• Cloudflare WARP: from 2022.2.95.0, before 2022.3.186.0 (fixed in 2022.3.186.0)

Published 2022-06-23. Last modified 2026-06-17.