CVE-2023-1862

score

<0.1

cvss

7.3

epss

0.8%

published

2023-06-20

kev added

—

first seen

2026-10-21

Cloudflare WARP client for Windows up to v2023.3.381.0 contains an insufficient access control policy on an IPC Named Pipe, letting malicious actors remotely access the warp-svc.exe binary, trigger connect/disconnect commands, and retrieve diagnostics and configuration, exploit requires target device reachable on port 445, NULL session authentication or credential knowledge.