Last updated
Cloudflare Tunnel provides you with a secure way to connect your resources to Cloudflare without a publicly routable IP address.
$ winget install --id Cloudflare.cloudflared --exact --version 2026.7.3Run in Command Prompt, PowerShell, or Windows Terminal. Prompts for any agreements.
cloudflared uses MSI (WiX). The silent install switches are /quiet /norestart.
msiexec.exe /i cloudflared-windows-amd64.msi /quiet /norestart
For IT teams
App deployment, patching, and remote support in one place. Push this app to every device you manage, keep it patched automatically, and see new CVEs the moment they land. Works with Intune or fully standalone.
Sign up freeFree for up to 5 devices.
Cloudflare Tunnel provides you with a secure way to connect your resources to Cloudflare without a publicly routable IP address. With Tunnel, you do not send traffic to an external IP — instead, a lightweight daemon in your infrastructure (cloudflared) creates outbound-only connections to Cloudflare's global network. Cloudflare Tunnel can connect HTTP web servers, SSH servers, remote desktops, and other protocols safely to Cloudflare. This way, your origins can serve traffic through Cloudflare without being vulnerable to attacks that bypass Cloudflare.
| Architecture | Type | Scope | Install | Download |
|---|---|---|---|---|
| x86 | MSI WiX | machine | Direct | |
| x86 | Portable | - | Direct | |
| x64 | MSI WiX | machine | Direct | |
| x64 | Portable | - | Direct |
Copy a command tailored to that specific architecture, type, and scope - useful when winget would otherwise pick a different default.
2 known CVEs via NVD
A vulnerability has been discovered in cloudflared's installer (<= 2023.3.0) for Windows 32-bits devices that allows a local attacker with no administrative permissions to escalate their privileges on the affected device. This vulnerability exists because the MSI installer used...
`cloudflared` versions prior to 2020.8.1 contain a local privilege escalation vulnerability on Windows systems. When run on a Windows system, `cloudflared` searches for configuration files which could be abused by a malicious entity to execute commands as a privileged user. Vers...
See a CVE that affects your fleet? Pckgr RMM flags vulnerable devices and pushes the patched version automatically.
More from cloudflare or browse argo-tunnel, cloudflare, cloudflare-tunnel.