The flaw resides in the SSO flow of Warpgate, which fails to validate the state parameter returned after authentication. This allows an attacker to perform a cross‑site request forgery that forces a legitimate user to sign in with the attacker’s account and may lead the user to carry out sensitive actions on that account, such as writing data to the attacker’s SSH target or accessing malicious web targets set up by the attacker.

Warp‑tech Warpgate, versions prior to 0.23.3. Users running any earlier release are impacted until the upgrade to 0.23.3 or a later patch that validates the state token.

The CVSS score of 5.8 indicates moderate severity. The EPSS score is not available, so the probability of exploitation is uncertain but could be low to moderate. The vulnerability is not listed in CISA's KEV catalog. The likely attack vector is web‑based; an attacker would need to lure a user to a crafted URL to trigger the CSRF and gain access to the attacker’s account.