CVE-2023-1314

CVE-2023-1314 is a local privilege escalation vulnerability affecting the cloudflared installer for 32-bit Windows devices (versions <= 2023.3.0). The vulnerability stems from the MSI installer using a world-writable directory, allowing a non-administrative local attacker to create symbolic links. This enables them to trick the installer's repair function into deleting arbitrary files, potentially leading to system compromise by removing critical files or replacing them with malicious ones. Rated with a CVSS score of 7.8 (High), this vulnerability has a local attack vector with low attack complexity and no user interaction required, leading to high impact on confidentiality, integrity, and availability. The cloudflared client itself is not affected. Currently, there is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, consistent with the majority of reported vulnerabilities.