Medium severity6.5NVD Advisory· Published Jun 23, 2022· Updated Jun 17, 2026

CVE-2022-2147

Description

Cloudflare Warp for Windows from version 2022.2.95.0 contained an unquoted service path which enables arbitrary code execution leading to privilege escalation. The fix was released in version 2022.3.186.0.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Cloudflare/WARPllm-fuzzy
Range: 2022.2.95.0 - 2022.3.185.0
Cloudflare/WARPv5
Range: 2022.2.95.0

Patches

Vulnerability mechanics

References

github.com/cloudflare/advisories/security/advisories/GHSA-m6w8-3pf9-p68rnvdRelease NotesThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000