# CVE-2021-27860: FatPipe WARP, IPVPN, and MPVPN Configuration Upload exploit

Source: https://junglewise.ai/threats/cve-2021-27860-fatpipe-warp-ipvpn-and-mpvpn-configuration-upload-exploit  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2022-01-10. Updated: 2026-05-10  
License: CC BY 4.0 with a link back

CVE-2021-27860 · Severity: critical · CVSS 9.8 · Exploited in the wild · Published 2022-01-10

A vulnerability in the web management interface of FatPipe WARP, IPVPN, and MPVPN software allows a remote, unauthenticated attacker to upload a file to any location on the filesystem. This unrestricted file upload can lead to full system compromise.

Technologies: [Fatpipe IPVPN](https://junglewise.ai/threats/technologies/ipvpn), [Fatpipe WARP](https://junglewise.ai/threats/technologies/warp). Vendors: [Fatpipe](https://junglewise.ai/threats/vendors/fatpipe).

## Quick answers

**Is CVE-2021-27860 exploited in the wild?** Yes. CVE-2021-27860 is known to be exploited in the wild, first recorded on 10 January 2022. Treat it as urgent.

**How severe is CVE-2021-27860?** Critical severity, with a CVSS score of 9.8, published 10 January 2022.

**Which products and versions are affected?** FatPipe WARP prior to 10.1.2r60p92 and 10.2.2r44p1; FatPipe IPVPN prior to 10.1.2r60p92 and 10.2.2r44p1; FatPipe MPVPN prior to 10.1.2r60p92 and 10.2.2r44p1.

**Is there a fix for CVE-2021-27860?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2021-27860 attacked?** It is attacked over the network, in a network appliance.

**Am I affected by CVE-2021-27860?** Check whether you run Fatpipe IPVPN, Fatpipe MPVPN Software or Fatpipe WARP. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Affected products

- FatPipe WARP prior to 10.1.2r60p92 and 10.2.2r44p1
- FatPipe IPVPN prior to 10.1.2r60p92 and 10.2.2r44p1
- FatPipe MPVPN prior to 10.1.2r60p92 and 10.2.2r44p1

## Timeline

- 2021-11-17: disclosed: FBI/IC3 advisory released regarding exploitation
- 2022-01-10: kev added: Added to CISA Known Exploited Vulnerabilities Catalog
- 2022-01-10: advisory: NVD publication date

## Related threats

- [FatPipe MPVPN WARP IPVPN stack buffer overflow in auth_user_pass](https://junglewise.ai/threats/cve-2026-90823-fatpipe-mpvpn-warp-ipvpn-stack-buffer-overflow-in-auth-user-pass)
- [FatPipe MPVPN, WARP, and IPVPN OS command injection in xtremed](https://junglewise.ai/threats/cve-2026-90822-fatpipe-mpvpn-warp-and-ipvpn-os-command-injection-in-xtremed)