Last updated
Cloudflare Tunnel provides you with a secure way to connect your resources to Cloudflare without a publicly routable IP address.
$ winget install --id Cloudflare.cloudflared --exact --version 2026.7.3Run in Command Prompt, PowerShell, or Windows Terminal. Prompts for any agreements.
cloudflared uses MSI (WiX). The silent install switches are /quiet /norestart.
msiexec.exe /i cloudflared-windows-amd64.msi /quiet /norestart
For Intune admins
Automated application patching for Microsoft Intune. Pckgr keeps a curated library of 1,000+ apps continuously up-to-date in your tenant via Microsoft Graph - no manual repackaging, no chasing vendor sites.
Start free 30-day trialNo credit card required.
Cloudflare Tunnel provides you with a secure way to connect your resources to Cloudflare without a publicly routable IP address. With Tunnel, you do not send traffic to an external IP — instead, a lightweight daemon in your infrastructure (cloudflared) creates outbound-only connections to Cloudflare's global network. Cloudflare Tunnel can connect HTTP web servers, SSH servers, remote desktops, and other protocols safely to Cloudflare. This way, your origins can serve traffic through Cloudflare without being vulnerable to attacks that bypass Cloudflare.
| Architecture | Type | Scope | Install | Download |
|---|---|---|---|---|
| x86 | MSI WiX | machine | Direct | |
| x86 | Portable | - | Direct | |
| x64 | MSI WiX | machine | Direct | |
| x64 | Portable | - | Direct |
Copy a command tailored to that specific architecture, type, and scope - useful when winget would otherwise pick a different default.
2 known CVEs via NVD
A vulnerability has been discovered in cloudflared's installer (<= 2023.3.0) for Windows 32-bits devices that allows a local attacker with no administrative permissions to escalate their privileges on the affected device. This vulnerability exists because the MSI installer used...
`cloudflared` versions prior to 2020.8.1 contain a local privilege escalation vulnerability on Windows systems. When run on a Windows system, `cloudflared` searches for configuration files which could be abused by a malicious entity to execute commands as a privileged user. Vers...
See a CVE that affects your fleet? Push the patched version to Intune in one click with Pckgr.
More from cloudflare or browse argo-tunnel, cloudflare, cloudflare-tunnel.