CVE-2022-2225 Information

Description

By using warp-cli subcommands (disable-ethernet disable-wifi) it was possible for a user without admin privileges to bypass configured Zero Trust security policies (e.g. Secure Web Gateway policies) and features such as ‘Lock WARP switch’.

Reference

https://github.com/cloudflare/advisories/security/advisories/GHSA-cg88-vx48-976c