CVE-2022-3512

CVE-2022-3512 is a high-severity vulnerability affecting Cloudflare WARP clients, allowing a privileged user to bypass Zero Trust policies. By using the "warp-cli add-trusted-ssid" command, an attacker can disconnect the WARP client and circumvent the "Lock WARP switch" feature, leading to un-enforced security policies. This vulnerability has a CVSS score of 8.8, indicating a high impact on confidentiality, integrity, and availability, with a low attack complexity and requiring only low privileges. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.