Cloudflare Public Bug Bounty · Report #1635748
Ability to bypass locked Cloudflare WARP on wifi networks.
Validstatus
highseverity
$1,000bounty
12upvotes
16 Nov 2022disclosed
Summary
Using warp-cli command "add-trusted-ssid", a user was able to disconnect WARP client and bypass the "Lock WARP switch" feature resulting in Zero Trust policies not being enforced on an affected endpoint.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.