Cloudflare WARP for Windows Privilege Escalation Vulnerability via Unquoted Service Path

A privilege escalation vulnerability has been identified in Cloudflare WARP for Windows, in versions prior to 1.2.2695.1. The issue arises from an unquoted service path, which allows a malicious user or process with non-administrative privileges to gain administrative rights by exploiting this flaw. The vulnerability has been addressed in version 1.2.2695.1 by adding quotes around the service's binary path.

Impact

Exploitation of this vulnerability allows for unauthorized privilege escalation, enabling a user or process to gain administrative rights on the system.

Remediation

Users can upgrade to Cloudflare WARP for Windows version 1.2.2695.1 or later to address this vulnerability.