Bitcoin Core discloses medium-severity vulnerability CVE-2025-62860, which was publicly disclosed on November 10, 2026

Odaily Planet Daily News: According to Bitcoin Core monitoring, the medium-severity vulnerability CVE-2025-62860 was disclosed on November 10, 2026. The vulnerability exists in versions prior to 28.3, 29.2, and 30.0. Due to external connections via Tor, the actual IP address is that of the local Tor software. If this address matches the trusted IP range configured via the -whitelist option, Bitcoin Core may incorrectly add these external Tor connections to the whitelist, thereby disabling anti-DoS protections and privacy leakage mitigation measures for trusted nodes. The announcement states that nodes not using a non-default -whitelist option have never been affected.