JA EN
shiichan

Windows Cloudflare One Client Beta Squashes a Pile of Nagging Bugs!

Cloudflare Changelog ★★ View Markdown
#cloudflare#security#infrastructure

Hi, it's me, Shiichan! Today I found news about a new beta release of the Cloudflare One Client for Windows, so let's dig in.

Cloudflare Changelog developers.cloudflare.com

What was announced?

Cloudflare's Changelog announced that a new beta release of the Cloudflare One Client (WARP) for Windows, version 2026.8.1290.1, is now available on the beta releases downloads page. It bundles both new capabilities and bug fixes.

The story so far

The previous Windows client had a handful of small but annoying behaviors. Slow captive portal checks — the kind of authentication screen you see on hotel Wi-Fi — could make the client service become unresponsive or even restart while connecting. There was also a race condition where switching tunnel protocols during key rotation could prevent WireGuard from connecting. On top of that, the client would sometimes keep reporting "No network" after a manual disconnect, and the UI could crash on startup if it couldn't write to the Windows registry.

What changes

This beta clears out a lot of that friction. On the feature side, when unrestricted LAN inclusion is enabled by policy or MDM, the client can now route non-RFC 1918 local IPv4 networks through the WARP tunnel too. DNS reliability on lower-MTU networks improved by clamping the TCP maximum segment size (MSS) for DNS-over-HTTPS connections sent through the tunnel. API reliability also got better, since requests dropped while reusing pooled connections are now retried automatically.

On Windows specifically, the client no longer requires the Windows WLAN AutoConfig service to be running. There's also a new recovery mechanism, backed by a Windows scheduler task, that starts the WARP service on system unlock if it isn't already running.

Dive Deep

There's a long list of fixes in this release, including:

  • Slow captive portal checks causing the client service to become unresponsive or restart while connecting
  • A race when switching tunnel protocols during key rotation that could prevent WireGuard from connecting
  • The client continuing to report "No network" after a successful manual disconnect
  • Digital Experience Monitoring (DEX) HTTP tests failing TLS validation on Windows
  • The client UI crashing at startup when it couldn't write to the Windows registry
  • Latency spikes and traffic interruptions during TPM-backed API authentication when hardware-backed registration is enabled
  • Trailing whitespace in BIOS serial numbers affecting serial-number and client-certificate device checks
  • Client UI crashes when the daemon connection was reset during an IPC request
  • A startup crash when date formatting data for the system locale hadn't loaded yet

Known issues for this release: none reported.

Wrap-up

  • A new beta of the Cloudflare One Client for Windows, version 2026.8.1290.1, is now available.
  • It adds routing for non-RFC 1918 local networks under policy/MDM settings and improves DNS reliability via MSS clamping for DNS-over-HTTPS.
  • A long list of small bugs got fixed, from captive-portal freezes to WireGuard race conditions and UI crashes.
  • The client no longer depends on the Windows WLAN AutoConfig service, and service recovery got sturdier.
  • A quietly solid update for IT admins and engineers running Cloudflare Zero Trust's WARP client on Windows.

Related posts