CVE-2022-4428

score

<0.1

cvss

8.9

epss

0.7%

published

2023-01-11

kev added

—

first seen

2026-10-21

The support_uri parameter in the WARP client local settings file (mdm.xml) contains a privilege escalation vulnerability caused by improper validation, allowing execution of arbitrary files on the local machine when clicking 'Send feedback', exploit requires attacker to have access to the local file system or manipulate the Cloudflare Zero Trust Dashboard configuration.