{"metadata": {"vulnerability": "CVE-2025-0651", "count": 18, "kinds": {"milestone": 4, "sighting": 6, "kev": 0, "other": 8}}, "data": [{"timestamp": "2025-01-22T15:57:16.758Z", "date_only": false, "value": "2025-01-22T15:57:16.758Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2025-0651", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-01-22T17:34:16.705Z", "date_only": false, "value": "2025-01-22T17:34:16.705Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-0651", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-01-22T17:35:44.533Z", "date_only": false, "value": "2025-01-22T17:35:44.533Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / cloudflare", "record": "CVE-2025-0651", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-01-22T17:44:56.041Z", "date_only": false, "value": "2025-01-22T17:44:56.041413Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-0651", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-01-22T17:44:56.041Z", "date_only": false, "value": "2025-01-22T17:44:56.041413Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-0651", "record": "FKIE_CVE-2025-0651", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-01-22T18:02:26Z", "date_only": false, "value": "2025-01-22T18:02:26.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2598", "record": "CVE-2025-0651", "field": "creation_timestamp", "uuid": "9ace3b3e-b5ce-4553-b70b-8f2907acae40", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0651\n\ud83d\udd39 Description: Improper Privilege Management vulnerability in Cloudflare WARP on Windows allows File Manipulation.\n\nUser with a low system privileges\u00a0 can create a set of symlinks inside the\u00a0C:\\ProgramData\\Cloudflare\\warp-diag-partials folder. After triggering the 'Reset all settings\" option the WARP service will delete the files that the symlink was pointing to. Given the WARP service operates with System privileges this might lead to deleting files owned by the System user.\nThis issue affects WARP: before 2024.12.492.0.\n\ud83d\udccf Published: 2025-01-22T17:34:16.705Z\n\ud83d\udccf Modified: 2025-01-22T17:35:44.533Z\n\ud83d\udd17 References:\n1. https://developers.cloudflare.com/warp-client/", "url": "https://t.me/DarkWebInformer_CVEAlerts/2598"}, {"timestamp": "2025-01-22T18:15:20Z", "date_only": false, "value": "2025-01-22T18:15:20Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-9G4Q-MQ35-FFG3", "record": "GHSA-9G4Q-MQ35-FFG3", "field": "database_specific.nvd_published_at"}, {"timestamp": "2025-01-22T18:15:20.363Z", "date_only": false, "value": "2025-01-22T18:15:20.363", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-0651", "record": "FKIE_CVE-2025-0651", "field": "published"}, {"timestamp": "2025-01-22T18:15:51.169Z", "date_only": false, "value": "2025-01-22T18:15:51.169818Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgdxxvysq32t", "record": "CVE-2025-0651", "field": "creation_timestamp", "uuid": "d0d86833-25d5-43eb-91b4-e0ea22f8bb72", "url": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgdxxvysq32t"}, {"timestamp": "2025-01-22T18:31:56Z", "date_only": false, "value": "2025-01-22T18:31:56Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-9G4Q-MQ35-FFG3", "record": "GHSA-9G4Q-MQ35-FFG3", "field": "published"}, {"timestamp": "2025-01-22T19:44:54Z", "date_only": false, "value": "2025-01-22T19:44:54.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/16136", "record": "CVE-2025-0651", "field": "creation_timestamp", "uuid": "26318c49-5e51-4f91-82ec-e6c796c5ea8a", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0651 - Cloudflare WARP Windows Privilege Escalation File Manipulation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-0651 \nPublished : Jan. 22, 2025, 6:15 p.m. | 27\u00a0minutes ago \nDescription : Improper Privilege Management vulnerability in Cloudflare WARP on Windows allows File Manipulation.  \n  \nUser with a low system privileges\u00a0 can create a set of symlinks inside the\u00a0C:\\ProgramData\\Cloudflare\\warp-diag-partials folder. After triggering the 'Reset all settings\" option the WARP service will delete the files that the symlink was pointing to. Given the WARP service operates with System privileges this might lead to deleting files owned by the System user.  \nThis issue affects WARP: before 2024.12.492.0. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/16136"}, {"timestamp": "2025-01-22T19:54:59.043Z", "date_only": false, "value": "2025-01-22T19:54:59.043434Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lge5j5xcpf2h", "record": "CVE-2025-0651", "field": "creation_timestamp", "uuid": "bc49f4ac-353e-40d2-a61c-f23abf3e25e4", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3lge5j5xcpf2h"}, {"timestamp": "2025-02-12T20:41:23.901Z", "date_only": false, "value": "2025-02-12T20:41:23.901Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2025-0651", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-02-12T20:41:23.901Z", "date_only": false, "value": "2025-02-12T20:41:23.901Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-0651", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-07-31T21:31:32Z", "date_only": false, "value": "2025-07-31T21:31:32Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-9G4Q-MQ35-FFG3", "record": "GHSA-9G4Q-MQ35-FFG3", "field": "modified"}, {"timestamp": "2026-06-17T08:26:54.383Z", "date_only": false, "value": "2026-06-17T08:26:54.383", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-0651", "record": "FKIE_CVE-2025-0651", "field": "lastModified"}, {"timestamp": "2026-10-25T19:07:49Z", "date_only": false, "value": "2026-10-25T19:07:49.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/107253", "record": "CVE-2025-0651", "field": "creation_timestamp", "uuid": "f16e5883-eae6-4b31-a9af-0af228cd18eb", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #SSRF #POC #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a Cloudflare-Exploits-CVE-2026-14440-CVE-2026-3125-CVE-2025-0651\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Ghost-Bx1\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-10-25 19:03:31\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC e exploits para CVE-2026-14440 (Universal SSL CAA Bypass), CVE-2026-3125 (OpenNext SSRF), CVE-2025-0651 (WARP Windows Privesc) | By Gh0st-Bx1\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/107253"}, {"timestamp": "2026-10-25T19:07:49Z", "date_only": false, "value": "2026-10-25T19:07:49.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/107253", "record": "CVE-2025-0651", "field": "creation_timestamp", "uuid": "5e4b65bc-730a-4f09-a377-2edd340b9589", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #SSRF #POC #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a Cloudflare-Exploits-CVE-2026-14440-CVE-2026-3125-CVE-2025-0651\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Ghost-Bx1\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-10-25 19:03:31\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC e exploits para CVE-2026-14440 (Universal SSL CAA Bypass), CVE-2026-3125 (OpenNext SSRF), CVE-2025-0651 (WARP Windows Privesc) | By Gh0st-Bx1\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/107253"}]}