VYPR
← All advisories
High severity7.1NVD Advisory· Published Jan 22, 2025· Updated Jun 17, 2026

CVE-2025-0651

CVE-2025-0651

Description

Improper Privilege Management vulnerability in Cloudflare WARP on Windows allows File Manipulation.

User with a low system privileges  can create a set of symlinks inside the C:\ProgramData\Cloudflare\warp-diag-partials folder. After triggering the 'Reset all settings" option the WARP service will delete the files that the symlink was pointing to. Given the WARP service operates with System privileges this might lead to deleting files owned by the System user. This issue affects WARP: before 2024.12.492.0.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Cloudflare/WARP3 versions
    cpe:2.3:a:cloudflare:warp:*:*:*:*:*:windows:*:*+ 2 more
    • cpe:2.3:a:cloudflare:warp:*:*:*:*:*:windows:*:*range: <2024.12.492.0
    • (no CPE)range: 0
    • (no CPE)range: <2024.12.492.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.