Cloudflare WARP Improper Privilege Management Vulnerability on Windows Allowing File Manipulation

A vulnerability in Cloudflare WARP for Windows, prior to version 2024.12.492.0, involves improper privilege management that enables file manipulation. Users with low system privileges can create symlinks in the C:\ProgramData\Cloudflare\warp-diag-partials directory. When the 'Reset all settings' option is activated, the WARP service deletes the files linked by the symlinks. Since the WARP service runs with system privileges, this could result in the unintentional deletion of files owned by the System user.

Impact

Exploitation of this vulnerability could lead to the unauthorized deletion of system-owned files, potentially disrupting system operations or causing loss of important data.