Bitcoin Core Discloses Medium-Risk Vulnerability CVE-2025-62860

Chainthink

Release Time: 2026/11/12 05:45:04

Summary

On November 10, 2026, Bitcoin Core disclosed a medium-risk vulnerability, CVE-2025-62860. The issue affects versions prior to 28.3, 29.2, and 30.0. When using Tor, if the local IP address falls within the -whitelist range, connections may bypass DoS protections. Nodes not configured with a custom -whitelist are unaffected. On-chain data indicates the scope of this issue is limited. A Layer 2 scaling solution could help mitigate similar risks in the future.

ChainThink reports that on November 10, Bitcoin Core disclosed a medium-severity vulnerability, CVE-2025-62860, affecting versions prior to 28.3, 29.2, and 30.0.

Because external connections made through Tor use the local Tor software's IP address, Bitcoin Core may incorrectly whitelist such connections if that address matches the trusted IP range configured via the -whitelist option, thereby disabling DoS protection and privacy leak mitigation measures for trusted nodes.

Nodes without the non-default -whitelist option set are unaffected.

Source:Show original

Disclaimer: The information on this page may have been obtained from third parties and does not necessarily reflect the views or opinions of KuCoin. This content is provided for general informational purposes only, without any representation or warranty of any kind, nor shall it be construed as financial or investment advice. KuCoin shall not be liable for any errors or omissions, or for any outcomes resulting from the use of this information. Investments in digital assets can be risky. Please carefully evaluate the risks of a product and your risk tolerance based on your own financial circumstances. For more information, please refer to our Terms of Use and Risk Disclosure.